@rubytech/create-maxy-code 0.1.570 → 0.1.571

package/payload/server/server.js

@@ -4367,7 +4367,7 @@ init_dist();
 import { readFileSync as readFileSync51, existsSync as existsSync54, watchFile, readdirSync as readdirSync32, statSync as statSync30 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash8 } from "crypto";
-import { resolve as resolve49, join as join60, basename as basename17 } from "path";
+import { resolve as resolve49, join as join61, basename as basename17 } from "path";
 import { homedir as homedir5 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -6788,6 +6788,9 @@ function createScheduleInjectRoutes(deps) {
         role: "admin",
         personId: null,
         text: prompt,
+        // Task 2489 — a scheduled inject carries no inbound file by
+        // construction: there is no message to have attached one.
+        media: [],
         source: "schedule",
         scheduleProvenance,
         reply
@@ -14961,7 +14964,7 @@ var webchat_greeting_default = app10;
 init_dist();
 init_claude_agent();
 import { homedir as homedir3 } from "os";
-import { resolve as resolve21, join as join32 } from "path";
+import { resolve as resolve21, join as join33 } from "path";
 import { existsSync as existsSync22, readFileSync as readFileSync27 } from "fs";
 
 // app/lib/telegram/gateway/instance.ts
@@ -15002,6 +15005,20 @@ function checkTelegramAccess(params) {
 }
 
 // app/lib/telegram/route-inbound.ts
+var CONTENT_KEYS = [
+  "photo",
+  "video",
+  "video_note",
+  "voice",
+  "audio",
+  "document",
+  "sticker",
+  "venue",
+  "location",
+  "text",
+  "caption"
+];
+var ENVELOPE_KEYS = /* @__PURE__ */ new Set(["message_id", "from", "chat", "date", "edit_date"]);
 function telegramSenderDisplay(from) {
   const first = from.first_name?.trim() ?? "";
   if (first.length > 0) {
@@ -15012,13 +15029,97 @@ function telegramSenderDisplay(from) {
   if (handle2.length > 0) return `@${handle2}`;
   return String(from.id ?? "");
 }
+function describeTelegramUpdate(update) {
+  const isEdit = update.message == null && update.edited_message != null;
+  const m = update.message ?? update.edited_message;
+  const envelope = update.message != null ? "message" : update.edited_message != null ? "edited_message" : "other";
+  if (!m) return { envelope, contentKeys: [], content: "none", primaryKind: "none", isEdit };
+  let contentKeys = CONTENT_KEYS.filter((k) => m[k] != null);
+  if (contentKeys.length === 0) {
+    contentKeys = Object.keys(m).filter((k) => !ENVELOPE_KEYS.has(k)).sort();
+  }
+  return {
+    envelope,
+    contentKeys,
+    content: contentKeys.length > 0 ? contentKeys.join(",") : "none",
+    primaryKind: contentKeys[0] ?? "none",
+    isEdit
+  };
+}
+function fileIds(f) {
+  if (!f || typeof f.file_id !== "string" || typeof f.file_unique_id !== "string") return null;
+  return { fileId: f.file_id, fileUniqueId: f.file_unique_id };
+}
+function extractContent(m) {
+  const media = [];
+  let placeholder = null;
+  const note = (s) => {
+    if (placeholder === null) placeholder = s;
+  };
+  const photo = Array.isArray(m.photo) && m.photo.length > 0 ? m.photo[m.photo.length - 1] : void 0;
+  const photoIds = fileIds(photo);
+  if (photoIds) {
+    media.push({ type: "image", ...photoIds, mimetype: "image/jpeg" });
+    note("[photo]");
+  }
+  const videoIds = fileIds(m.video);
+  if (videoIds) {
+    media.push({ type: "video", ...videoIds, ...m.video?.mime_type ? { mimetype: m.video.mime_type } : {} });
+    note("[video]");
+  }
+  const videoNoteIds = fileIds(m.video_note);
+  if (videoNoteIds) {
+    media.push({
+      type: "video",
+      ...videoNoteIds,
+      ...m.video_note?.mime_type ? { mimetype: m.video_note.mime_type } : {}
+    });
+    note("[video]");
+  }
+  const voiceIds = fileIds(m.voice);
+  if (voiceIds) {
+    media.push({ type: "audio", ...voiceIds, ...m.voice?.mime_type ? { mimetype: m.voice.mime_type } : {} });
+    note("[voice]");
+  }
+  const audioIds = fileIds(m.audio);
+  if (audioIds) {
+    media.push({ type: "audio", ...audioIds, ...m.audio?.mime_type ? { mimetype: m.audio.mime_type } : {} });
+    note("[audio]");
+  }
+  const docIds = fileIds(m.document);
+  if (docIds) {
+    media.push({
+      type: "document",
+      ...docIds,
+      ...m.document?.mime_type ? { mimetype: m.document.mime_type } : {},
+      ...m.document?.file_name ? { fileName: m.document.file_name } : {}
+    });
+    note(`[document: ${m.document?.file_name ?? "file"}]`);
+  }
+  if (m.sticker) note("[sticker]");
+  if (m.venue) {
+    const v = m.venue;
+    const parts = [v.title, v.address, `${v.location?.latitude},${v.location?.longitude}`].filter(Boolean);
+    note(`[location: ${parts.join(" \u2014 ")}]`);
+  }
+  if (m.location) {
+    const coords = `${m.location.latitude},${m.location.longitude}`;
+    note(m.location.live_period != null ? `[live location: ${coords}]` : `[location: ${coords}]`);
+  }
+  return { placeholder, media };
+}
 function routeTelegramUpdate(input) {
-  const m = input.update.message;
+  const isEdit = input.update.message == null && input.update.edited_message != null;
+  const m = input.update.message ?? input.update.edited_message;
   if (!m || typeof m.from?.id !== "number" || typeof m.chat?.id !== "number") {
     return { kind: "ignore", reason: "no-message" };
   }
-  if (typeof m.text !== "string" || m.text.length === 0) {
-    return { kind: "ignore", reason: "no-text" };
+  const { placeholder, media } = extractContent(m);
+  const typed = typeof m.text === "string" && m.text.length > 0 ? m.text : null;
+  const captioned = typeof m.caption === "string" && m.caption.length > 0 ? m.caption : null;
+  const text = typed ?? captioned ?? placeholder ?? "";
+  if (text.length === 0 && media.length === 0) {
+    return { kind: "ignore", reason: "unsupported-content" };
   }
   const access = checkTelegramAccess({ senderId: m.from.id, entry: input.entry });
   if (!access.allowed) {
@@ -15028,25 +15129,211 @@ function routeTelegramUpdate(input) {
     kind: "dispatch",
     senderId: String(m.from.id),
     chatId: m.chat.id,
-    text: m.text,
+    text,
     agentType: access.agentType,
     reason: access.reason,
     messageId: Number.isInteger(m.message_id) ? m.message_id : null,
-    senderDisplay: telegramSenderDisplay(m.from)
+    senderDisplay: telegramSenderDisplay(m.from),
+    media,
+    isEdit,
+    editDate: Number.isInteger(m.edit_date) ? m.edit_date : null,
+    textIsPlaceholder: typed === null && captioned === null && placeholder !== null
   };
 }
 
+// app/lib/telegram/inbound/media.ts
+import { mkdir as mkdir2, writeFile as writeFile4 } from "fs/promises";
+import { join as join31 } from "path";
+var TAG24 = "[telegram-inbound]";
+var TELEGRAM_MEDIA_DIR = "/tmp/maxy-media";
+var DOWNLOAD_TIMEOUT_MS = 45e3;
+function extensionFor(filePath, mimetype) {
+  const fromPath = filePath.split("/").pop()?.split(".").slice(1).pop();
+  if (fromPath && /^[a-z0-9]+$/i.test(fromPath)) return fromPath;
+  const sub = mimetype?.split("/").pop()?.split(";")[0]?.trim();
+  if (sub && /^[a-z0-9]+$/i.test(sub)) return sub;
+  return "bin";
+}
+function pathSafe(s) {
+  return s.replace(/[^A-Za-z0-9_-]/g, "_");
+}
+function refusalReason(body, status) {
+  const b = body;
+  if (typeof b?.description === "string" && b.description.length > 0) return b.description;
+  return `telegram returned ${status}`;
+}
+async function downloadTelegramMedia(input) {
+  if (input.items.length === 0) return [];
+  const doFetch = input.fetchImpl ?? fetch;
+  const dir = input.dir ?? TELEGRAM_MEDIA_DIR;
+  const timeoutMs = input.timeoutMs ?? DOWNLOAD_TIMEOUT_MS;
+  const out = [];
+  for (const item of input.items) {
+    const base = {
+      type: item.type,
+      ...item.mimetype ? { mimetype: item.mimetype } : {}
+    };
+    let result;
+    let bytes = 0;
+    try {
+      const signal = AbortSignal.timeout(timeoutMs);
+      const metaRes = await doFetch(
+        `https://api.telegram.org/bot${input.token}/getFile?file_id=${encodeURIComponent(item.fileId)}`,
+        { signal }
+      );
+      const meta = await metaRes.json();
+      const filePath = meta?.result?.file_path;
+      if (!metaRes.ok || meta?.ok !== true || typeof filePath !== "string" || filePath.length === 0) {
+        result = { ...base, failure: refusalReason(meta, metaRes.status) };
+      } else {
+        const fileRes = await doFetch(`https://api.telegram.org/file/bot${input.token}/${filePath}`, { signal });
+        if (!fileRes.ok) {
+          result = { ...base, failure: `telegram returned ${fileRes.status}` };
+        } else {
+          const body = Buffer.from(await fileRes.arrayBuffer());
+          await mkdir2(dir, { recursive: true });
+          const path = join31(
+            dir,
+            `tg-${pathSafe(input.botId)}-${pathSafe(item.fileUniqueId)}.${extensionFor(filePath, item.mimetype)}`
+          );
+          await writeFile4(path, body);
+          bytes = body.length;
+          result = { ...base, path };
+        }
+      }
+    } catch (err) {
+      result = { ...base, failure: err instanceof Error ? err.message : String(err) };
+    }
+    console.error(
+      `${TAG24} op=media-download botId=${input.botId} type=${item.type} ok=${result.path ? "yes" : "no"} bytes=${bytes} path=${result.path ?? "-"} reason=${result.failure ?? "-"}`
+    );
+    out.push(result);
+  }
+  return out;
+}
+
+// app/lib/telegram/inbound/transcribe.ts
+init_stt();
+var TAG25 = "[telegram-inbound]";
+async function transcribeTelegramAudio(input) {
+  const doTranscribe = input.transcribeImpl ?? transcribe;
+  const out = [];
+  const transcripts = [];
+  for (const m of input.media) {
+    if (m.type !== "audio") {
+      out.push(m);
+      continue;
+    }
+    if (!m.path) {
+      console.error(
+        `${TAG25} op=transcribe botId=${input.botId} ok=no chars=0 ms=0 reason=${m.failure ?? "no local file"}`
+      );
+      out.push(m);
+      continue;
+    }
+    const startedMs = Date.now();
+    let heard;
+    let reason = "-";
+    try {
+      const r = await doTranscribe(m.path, m.mimetype ?? "");
+      const t = r?.text.trim();
+      heard = t ? t : void 0;
+      if (!heard) reason = "no transcript returned";
+    } catch (err) {
+      reason = err instanceof Error ? err.message : String(err);
+    }
+    console.error(
+      `${TAG25} op=transcribe botId=${input.botId} ok=${heard ? "yes" : "no"} chars=${heard?.length ?? 0} ms=${Date.now() - startedMs} reason=${reason}`
+    );
+    if (heard) {
+      transcripts.push(heard);
+      out.push({ ...m, transcribed: true });
+    } else {
+      out.push(m);
+    }
+  }
+  if (transcripts.length === 0) return { text: input.text, media: out };
+  const body = transcripts.join("\n\n");
+  const caption = input.textIsPlaceholder ? "" : input.text.trim();
+  return { text: caption ? `${caption}
+
+${body}` : body, media: out };
+}
+
+// app/lib/telegram/gateway/telegram-inbound-census.ts
+var ANSWER_THRESHOLD_MS = 3e4;
+var GAP_NAME_LIMIT = 10;
+var received = 0;
+var answered = 0;
+var outstanding = /* @__PURE__ */ new Map();
+var kindDispatched = 0;
+var kindIgnored = 0;
+var kindCounts = /* @__PURE__ */ new Map();
+function noteInboundKind(kind, dispatched) {
+  if (dispatched) kindDispatched += 1;
+  else kindIgnored += 1;
+  kindCounts.set(kind, (kindCounts.get(kind) ?? 0) + 1);
+}
+function readTelegramKindCensus() {
+  const kinds = [...kindCounts.entries()].map(([kind, count]) => ({ kind, count })).sort((a, b) => b.count - a.count || a.kind.localeCompare(b.kind));
+  return { dispatched: kindDispatched, ignored: kindIgnored, kinds };
+}
+function buildTelegramKindCensusLine(c) {
+  const kinds = c.kinds.length > 0 ? c.kinds.map((k) => `${k.kind}:${k.count}`).join(",") : "none";
+  return `[telegram-native] op=inbound-kind-census dispatched=${c.dispatched} ignored=${c.ignored} kinds=${kinds}`;
+}
+function noteReceived(key2, botId, messageId, now) {
+  received += 1;
+  const list = outstanding.get(key2);
+  if (list) list.push({ messageId, botId, receivedAt: now });
+  else outstanding.set(key2, [{ messageId, botId, receivedAt: now }]);
+}
+function noteAnswered(key2) {
+  const list = outstanding.get(key2);
+  if (!list || list.length === 0) return;
+  list.shift();
+  if (list.length === 0) outstanding.delete(key2);
+  answered += 1;
+}
+function readTelegramInboundCensus(now) {
+  const gaps = [];
+  for (const [key2, list] of outstanding) {
+    for (const o of list) {
+      const ageMs2 = now - o.receivedAt;
+      if (ageMs2 > ANSWER_THRESHOLD_MS) gaps.push({ messageId: o.messageId, botId: o.botId, key: key2, ageMs: ageMs2 });
+    }
+  }
+  gaps.sort((a, b) => b.ageMs - a.ageMs);
+  return { received, answered, gaps };
+}
+function buildTelegramNotifyReconcileLines(input) {
+  const named = input.gaps.slice(0, GAP_NAME_LIMIT);
+  const lines = [
+    `[telegram-native] op=telegram-notify-reconcile received=${input.received} answered=${input.answered} answerGap=${input.gaps.length} named=${named.length}`
+  ];
+  for (const g of named) {
+    lines.push(
+      `[telegram-native] op=telegram-answer-gap messageId=${g.messageId} botId=${g.botId} key=${g.key} ageMs=${g.ageMs}`
+    );
+  }
+  return lines;
+}
+function runTelegramNotifyReconcile(now) {
+  for (const line of buildTelegramNotifyReconcileLines(readTelegramInboundCensus(now))) console.error(line);
+  console.error(buildTelegramKindCensusLine(readTelegramKindCensus()));
+}
+
 // server/routes/telegram.ts
 init_channel_key();
 init_admin_session_id();
 
 // server/channel-session-override.ts
 import { readFileSync as readFileSync26, writeFileSync as writeFileSync11, renameSync as renameSync5 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 var FILE2 = "channel-session-override.json";
 var UUID3 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function channelOverridePath(accountDir) {
-  return join31(accountDir, FILE2);
+  return join32(accountDir, FILE2);
 }
 function senderKey(channel, senderId) {
   return `${channel}:${senderId}`;
@@ -15152,8 +15439,9 @@ function decideTelegramNotify(input) {
   if (input.isDuplicate()) return { emit: false, reason: "duplicate" };
   return { emit: true, senderType: input.agentType };
 }
-function telegramNotifyId(botId, chatId, messageId) {
-  return `tg:${botId}:${chatId}:${messageId}`;
+function telegramNotifyId(botId, chatId, messageId, editDate) {
+  const suffix = editDate === void 0 ? "" : `:edit:${editDate}`;
+  return `tg:${botId}:${chatId}:${messageId}${suffix}`;
 }
 
 // app/lib/telegram/inbound/notify-dedupe.ts
@@ -15182,21 +15470,21 @@ function isTelegramNotifyDuplicate(notifyId) {
 
 // app/lib/telegram/gateway/telegram-notify-census.ts
 var PUBLISH_THRESHOLD_MS = 3e4;
-var GAP_NAME_LIMIT = 10;
+var GAP_NAME_LIMIT2 = 10;
 var eligible = 0;
 var published = 0;
-var outstanding = /* @__PURE__ */ new Map();
+var outstanding2 = /* @__PURE__ */ new Map();
 function noteNotifyEligible(notifyId, botId, now) {
   eligible += 1;
-  outstanding.set(notifyId, { botId, at: now });
+  outstanding2.set(notifyId, { botId, at: now });
 }
 function noteNotifyPublished(notifyId) {
-  if (!outstanding.delete(notifyId)) return;
+  if (!outstanding2.delete(notifyId)) return;
   published += 1;
 }
 function readTelegramNotifyCensus(now) {
   const missing = [];
-  for (const [notifyId, o] of outstanding) {
+  for (const [notifyId, o] of outstanding2) {
     const ageMs2 = now - o.at;
     if (ageMs2 > PUBLISH_THRESHOLD_MS) missing.push({ notifyId, botId: o.botId, ageMs: ageMs2 });
   }
@@ -15204,7 +15492,7 @@ function readTelegramNotifyCensus(now) {
   return { eligible, published, missing };
 }
 function buildTelegramNotifyCensusLines(input) {
-  const named = input.missing.slice(0, GAP_NAME_LIMIT);
+  const named = input.missing.slice(0, GAP_NAME_LIMIT2);
   const lines = [
     `[telegram-native] op=notify-publish-census eligible=${input.eligible} published=${input.published} missing=${input.missing.length} named=${named.length}`
   ];
@@ -15224,10 +15512,10 @@ function runTelegramNotifyPublishCensus(now) {
 // server/routes/telegram.ts
 init_neo4j_store();
 var telegramAdoptionSeen = /* @__PURE__ */ new Set();
-var TAG24 = "[telegram-inbound]";
+var TAG26 = "[telegram-inbound]";
 function configDirName2() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? resolve21(process.cwd(), "..");
-  const brandPath = join32(platformRoot5, "config", "brand.json");
+  const brandPath = join33(platformRoot5, "config", "brand.json");
   if (existsSync22(brandPath)) {
     try {
       return JSON.parse(readFileSync27(brandPath, "utf-8")).configDir ?? ".maxy";
@@ -15246,61 +15534,67 @@ var app11 = new Hono();
 app11.post("/", async (c) => {
   const botId = c.req.query("bot");
   if (!botId) {
-    console.error(`${TAG24} op=reject reason=missing-bot-param`);
+    console.error(`${TAG26} op=reject reason=missing-bot-param`);
     return c.json({ ok: false }, 400);
   }
-  console.error(`${TAG24} op=received botId=${botId} path=/api/telegram/`);
+  console.error(`${TAG26} op=received botId=${botId} path=/api/telegram/`);
   const resolved = resolveBotEntry(listValidAccounts(), botId);
   if (resolved.kind === "none") {
-    console.error(`${TAG24} op=reject reason=unknown-bot botId=${botId}`);
+    console.error(`${TAG26} op=reject reason=unknown-bot botId=${botId}`);
     return c.json({ ok: false }, 401);
   }
   if (resolved.kind === "duplicate") {
-    console.error(`${TAG24} op=reject reason=duplicate-bot-id botId=${botId} accounts=${resolved.count}`);
+    console.error(`${TAG26} op=reject reason=duplicate-bot-id botId=${botId} accounts=${resolved.count}`);
     return c.json({ ok: false }, 401);
   }
   const { accountId, accountDir, entry } = resolved;
   const agentSlug = entry.role === "admin" ? "admin" : entry.agent;
-  console.error(`${TAG24} op=entry botId=${botId} accountId=${accountId} role=${entry.role} agent=${agentSlug}`);
+  console.error(`${TAG26} op=entry botId=${botId} accountId=${accountId} role=${entry.role} agent=${agentSlug}`);
   const sp = secretPath(botId);
   if (!existsSync22(sp)) {
-    console.error(`${TAG24} op=secret botId=${botId} result=missing-file`);
+    console.error(`${TAG26} op=secret botId=${botId} result=missing-file`);
     return c.json({ ok: false }, 401);
   }
   const expected = readFileSync27(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
-    console.error(`${TAG24} op=secret botId=${botId} result=mismatch`);
+    console.error(`${TAG26} op=secret botId=${botId} result=mismatch`);
     return c.json({ ok: false }, 401);
   }
-  console.error(`${TAG24} op=secret botId=${botId} result=ok`);
+  console.error(`${TAG26} op=secret botId=${botId} result=ok`);
   let update;
   try {
     update = await c.req.json();
   } catch {
     return c.json({ ok: true }, 200);
   }
+  const shape = describeTelegramUpdate(update);
+  console.error(
+    `${TAG26} op=inbound-kind botId=${botId} update=${shape.envelope} content=${shape.content} isEdit=${shape.isEdit ? "yes" : "no"}`
+  );
   const decision = routeTelegramUpdate({ update, entry });
+  noteInboundKind(shape.primaryKind, decision.kind === "dispatch");
   if (decision.kind === "ignore") {
-    console.error(`${TAG24} op=ignore botId=${botId} reason=${decision.reason}`);
+    console.error(`${TAG26} op=ignore botId=${botId} reason=${decision.reason}`);
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "denied") {
-    console.error(`${TAG24} op=access botId=${botId} senderId=- allowed=false reason=${decision.reason}`);
+    console.error(`${TAG26} op=access botId=${botId} senderId=- allowed=false reason=${decision.reason}`);
     return c.json({ ok: true }, 200);
   }
   const { senderId, chatId, text } = decision;
-  console.error(`${TAG24} op=access botId=${botId} senderId=${senderId} allowed=true reason=${decision.reason}`);
+  console.error(`${TAG26} op=access botId=${botId} senderId=${senderId} allowed=true reason=${decision.reason}`);
   const channelKey = telegramChannelKey(botId, senderId);
   const scope = entry.role === "admin" ? "admin" : "public";
   const adminUserId = entry.role === "admin" ? resolveTelegramAdminUserId({ accountId, chatId: senderId }) : null;
   const sessionId = adminUserId ? adminSessionIdFor(accountId, senderId, adminUserId) : adminSessionIdFor(accountId, senderId, void 0, botId);
   const inboundAt = (/* @__PURE__ */ new Date()).toISOString();
+  const editSuffix = decision.isEdit ? `:edit:${decision.editDate}` : "";
   appendMessage2(accountId, {
     // Telegram's own per-chat message number, so a redelivered update dedupes.
     // Task 2437 parses it once, in routeTelegramUpdate; reading the raw update
     // again here would be a second authority for the same fact.
-    messageId: `telegram:${accountId}:${channelKey}:in:${decision.messageId ?? inboundAt}`,
+    messageId: `telegram:${accountId}:${channelKey}:in:${decision.messageId ?? inboundAt}${editSuffix}`,
     sessionId,
     dateSent: inboundAt,
     body: text,
@@ -15319,14 +15613,26 @@ app11.post("/", async (c) => {
     const gate = decideTelegramNotify({
       messageId: decision.messageId,
       agentType: decision.agentType,
-      isDuplicate: () => decision.messageId === null ? false : isTelegramNotifyDuplicate(telegramNotifyId(botId, String(chatId), decision.messageId))
+      isDuplicate: () => decision.messageId === null ? false : isTelegramNotifyDuplicate(
+        telegramNotifyId(
+          botId,
+          String(chatId),
+          decision.messageId,
+          decision.isEdit ? decision.editDate : void 0
+        )
+      )
     });
     if (!gate.emit) {
       console.error(
         `[channel-notify] op=skip channel=telegram botId=${botId} reason=${gate.reason}`
       );
     } else {
-      const notifyId = telegramNotifyId(botId, String(chatId), decision.messageId);
+      const notifyId = telegramNotifyId(
+        botId,
+        String(chatId),
+        decision.messageId,
+        decision.isEdit ? decision.editDate : void 0
+      );
       const { body, truncated } = formatNotifyBody(text);
       noteNotifyEligible(notifyId, botId, Date.now());
       console.error(
@@ -15357,14 +15663,14 @@ app11.post("/", async (c) => {
     }
   }
   const active = entry.role === "admin" ? true : isActiveAgentSlug(accountDir, entry.agent);
-  console.error(`${TAG24} op=agent botId=${botId} slug=${agentSlug} active=${active}`);
+  console.error(`${TAG26} op=agent botId=${botId} slug=${agentSlug} active=${active}`);
   if (!active) {
-    console.error(`${TAG24} op=reject reason=agent-inactive botId=${botId} agent=${agentSlug}`);
+    console.error(`${TAG26} op=reject reason=agent-inactive botId=${botId} agent=${agentSlug}`);
     return c.json({ ok: true }, 200);
   }
   const gateway = getTelegramGateway();
   if (!gateway) {
-    console.error(`${TAG24} op=reply-dropped botId=${botId} reason=gateway-not-ready`);
+    console.error(`${TAG26} op=reply-dropped botId=${botId} reason=gateway-not-ready`);
     return c.json({ ok: true }, 200);
   }
   const reply = async (replyText) => {
@@ -15385,8 +15691,8 @@ app11.post("/", async (c) => {
         origin: "agent",
         createdAt: at
       });
-      console.error(`${TAG24} op=reply-sent botId=${botId} ok=true`);
-    } else console.error(`${TAG24} op=reply-dropped botId=${botId} reason=${sent.error}`);
+      console.error(`${TAG26} op=reply-sent botId=${botId} ok=true`);
+    } else console.error(`${TAG26} op=reply-dropped botId=${botId} reason=${sent.error}`);
   };
   if (adminUserId) {
     const line = runAdminSessionAdoption({
@@ -15412,25 +15718,35 @@ app11.post("/", async (c) => {
     });
     if (line) console.error(line);
   }
-  void gateway.handleInbound({
-    accountId,
-    accountDir,
-    botId,
-    botToken: entry.token,
-    agentSlug,
-    senderId,
-    role: entry.role,
-    personId: null,
-    // Task 2078 — the admin person this chat is bound to (the users.json
-    // telegram binding). It is the SUBJECT of the session id, so one admin's
-    // Telegram, WhatsApp and webchat resolve to one conversation. Resolved
-    // above, alongside the store row's own session id, so the row and the spawn
-    // can never name different sessions for one message.
-    adminUserId,
-    chatId: String(chatId),
-    text,
-    reply
-  });
+  const media = await downloadTelegramMedia({ token: entry.token, botId, items: decision.media });
+  void (async () => {
+    const heard = await transcribeTelegramAudio({
+      botId,
+      text,
+      textIsPlaceholder: decision.textIsPlaceholder,
+      media
+    });
+    void gateway.handleInbound({
+      accountId,
+      accountDir,
+      botId,
+      botToken: entry.token,
+      agentSlug,
+      senderId,
+      role: entry.role,
+      personId: null,
+      // Task 2078 — the admin person this chat is bound to (the users.json
+      // telegram binding). It is the SUBJECT of the session id, so one admin's
+      // Telegram, WhatsApp and webchat resolve to one conversation. Resolved
+      // above, alongside the store row's own session id, so the row and the spawn
+      // can never name different sessions for one message.
+      adminUserId,
+      chatId: String(chatId),
+      text: heard.text,
+      media: heard.media,
+      reply
+    });
+  })();
   return c.json({ ok: true }, 200);
 });
 var telegram_default = app11;
@@ -15444,29 +15760,29 @@ function mountTelegramRoutes(app79, telegramRoutes) {
 // server/routes/quickbooks.ts
 init_dist();
 init_claude_agent();
-import { join as join33 } from "path";
+import { join as join34 } from "path";
 import { existsSync as existsSync23, readFileSync as readFileSync28, writeFileSync as writeFileSync12, mkdirSync as mkdirSync5, rmSync as rmSync4, renameSync as renameSync6 } from "fs";
-var TAG25 = "[quickbooks]";
+var TAG27 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
-  return join33(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
+  return join34(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
 }
 function storePath(accountDir) {
-  return join33(accountDir, "secrets", "quickbooks.json");
+  return join34(accountDir, "secrets", "quickbooks.json");
 }
 async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
   const state = args.state;
   if (!state || !STATE_RE.test(state) || !existsSync23(pendingPath(accountDir, state))) {
-    console.error(`${TAG25} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG27} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   const claimFile = `${pendingPath(accountDir, state)}.claimed`;
   try {
     renameSync6(pendingPath(accountDir, state), claimFile);
   } catch {
-    console.error(`${TAG25} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG27} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   try {
@@ -15474,14 +15790,14 @@ async function completeConsent(args) {
     try {
       pending = JSON.parse(readFileSync28(claimFile, "utf-8"));
     } catch {
-      console.error(`${TAG25} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG27} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization state could not be read.", stateValid: false };
     }
     if (Date.now() > pending.expiresAt) {
-      console.error(`${TAG25} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG27} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization request expired. Generate a new consent link.", stateValid: false };
     }
-    console.error(`${TAG25} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
+    console.error(`${TAG27} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
     if (!code || !realmId) {
       return { ok: false, status: 400, message: "Missing code or realmId in the callback.", stateValid: true };
     }
@@ -15505,12 +15821,12 @@ async function completeConsent(args) {
     });
     const text = await res.text();
     if (!res.ok) {
-      console.error(`${TAG25} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG27} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: `Token exchange failed (${res.status}). Generate a new consent link to retry.`, stateValid: true };
     }
     const body = JSON.parse(text);
     if (!body.refresh_token) {
-      console.error(`${TAG25} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG27} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: "Token exchange returned no refresh token.", stateValid: true };
     }
     const now = Date.now();
@@ -15520,10 +15836,10 @@ async function completeConsent(args) {
       refreshTokenExpiry: now + (body.x_refresh_token_expires_in ?? 864e4) * 1e3,
       lastRefresh: now
     };
-    mkdirSync5(join33(accountDir, "secrets"), { recursive: true });
+    mkdirSync5(join34(accountDir, "secrets"), { recursive: true });
     writeFileSync12(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
     const persisted = JSON.parse(readFileSync28(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
-    console.error(`${TAG25} op=token-exchange realmId=${realmId} persisted=${persisted}`);
+    console.error(`${TAG27} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
     rmSync4(claimFile, { force: true });
@@ -15536,7 +15852,7 @@ var app12 = new Hono();
 app12.get("/callback", async (c) => {
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG25} op=callback stateValid=false realmId= reason=no-account`);
+    console.error(`${TAG27} op=callback stateValid=false realmId= reason=no-account`);
     return c.html(page("QuickBooks", "This install has no account configured."), 500);
   }
   const result = await completeConsent({
@@ -15566,7 +15882,7 @@ function claudeBin() {
 }
 
 // server/routes/onboarding.ts
-import { dirname as dirname13, join as join35 } from "path";
+import { dirname as dirname13, join as join36 } from "path";
 
 // app/lib/claude-keychain.ts
 import { execFileSync as execFileSync3 } from "child_process";
@@ -15696,7 +16012,7 @@ function readHostCredsBlob(service) {
 
 // ../lib/admins-write/src/index.ts
 import { existsSync as existsSync24, readFileSync as readFileSync29, writeFileSync as writeFileSync13, renameSync as renameSync7, mkdirSync as mkdirSync6, readdirSync as readdirSync19, statSync as statSync18, appendFileSync as appendFileSync2 } from "fs";
-import { dirname as dirname12, join as join34 } from "path";
+import { dirname as dirname12, join as join35 } from "path";
 function id8(value) {
   return value.slice(0, 8);
 }
@@ -15769,7 +16085,7 @@ function writeAdminEntry(input) {
     return result;
   }
   try {
-    const accountJsonPath = join34(input.accountDir, "account.json");
+    const accountJsonPath = join35(input.accountDir, "account.json");
     if (!existsSync24(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
@@ -15817,13 +16133,13 @@ function computeAdminStoreDivergence(input) {
     }
     for (const entry of entries2) {
       if (entry.startsWith(".")) continue;
-      const accountDir = join34(input.accountsDir, entry);
+      const accountDir = join35(input.accountsDir, entry);
       try {
         if (!statSync18(accountDir).isDirectory()) continue;
       } catch {
         continue;
       }
-      const accountJsonPath = join34(accountDir, "account.json");
+      const accountJsonPath = join35(accountDir, "account.json");
       if (!existsSync24(accountJsonPath)) continue;
       let admins = [];
       try {
@@ -16002,7 +16318,7 @@ app13.post("/claude-auth", async (c) => {
       });
       persistKeychainService(
         writebackResult,
-        (service) => writeFileSync14(join35(dirname13(CLAUDE_CREDENTIALS_FILE), ".keychain-service"), service, { mode: 384 }),
+        (service) => writeFileSync14(join36(dirname13(CLAUDE_CREDENTIALS_FILE), ".keychain-service"), service, { mode: 384 }),
         (line) => console.log(line)
       );
       if (darwinAuthChild === claudeProc2) darwinAuthChild = null;
@@ -16272,8 +16588,8 @@ init_paths();
 init_remote_auth();
 init_loop_registry();
 import { appendFileSync as appendFileSync3, existsSync as existsSync26, renameSync as renameSync9, statSync as statSync19 } from "fs";
-import { join as join36 } from "path";
-var CLIENT_ERRORS_LOG = join36(LOG_DIR, "client-errors.log");
+import { join as join37 } from "path";
+var CLIENT_ERRORS_LOG = join37(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -16701,12 +17017,12 @@ import { resolve as resolve22, basename as basename11 } from "path";
 
 // app/lib/logs-read-resolve.ts
 import { existsSync as existsSync27 } from "fs";
-import { join as join37 } from "path";
+import { join as join38 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
-    const fullPath = join37(dir, filename);
+    const fullPath = join38(dir, filename);
     if (existsSync27(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
@@ -17036,7 +17352,7 @@ import { execFileSync as execFileSync6 } from "child_process";
 // ../services/claude-session-manager/src/tool-surface.ts
 import { readFileSync as readFileSync32, readdirSync as readdirSync21, statSync as statSync22, existsSync as existsSync31 } from "fs";
 import { createHash as createHash5 } from "crypto";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 
 // ../services/claude-session-manager/src/canonical-tool-names.ts
 function canonicalToolName(plugin, tool) {
@@ -17289,13 +17605,13 @@ function loadToolSurface(pluginsRoots) {
   const riskByTool = /* @__PURE__ */ new Map();
   const manifestPaths = /* @__PURE__ */ new Map();
   const loadOne = (pluginsRoot, plugin) => {
-    const pluginDir = join38(pluginsRoot, plugin);
+    const pluginDir = join39(pluginsRoot, plugin);
     try {
       if (!statSync22(pluginDir).isDirectory()) return;
     } catch {
       return;
     }
-    const manifestPath = join38(pluginDir, "PLUGIN.md");
+    const manifestPath = join39(pluginDir, "PLUGIN.md");
     if (!existsSync31(manifestPath)) return;
     const raw = readFileSync32(manifestPath, "utf-8");
     const frontmatter = extractFrontmatter(raw, plugin);
@@ -17341,9 +17657,9 @@ function loadToolSurface(pluginsRoots) {
   for (const root of roots) {
     const entries2 = readdirSync21(root).sort();
     for (const plugin of entries2) {
-      const pluginDir = join38(root, plugin);
+      const pluginDir = join39(root, plugin);
       loadOne(root, plugin);
-      const subRoot = join38(pluginDir, "plugins");
+      const subRoot = join39(pluginDir, "plugins");
       let subEntries;
       try {
         if (!statSync22(subRoot).isDirectory()) continue;
@@ -18804,7 +19120,7 @@ init_claude_agent();
 init_account();
 init_neo4j_store();
 import { existsSync as existsSync34, readFileSync as readFileSync34, readdirSync as readdirSync23, statSync as statSync23 } from "fs";
-import { dirname as dirname14, resolve as resolve25, join as join39 } from "path";
+import { dirname as dirname14, resolve as resolve25, join as join40 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
   try {
@@ -18845,8 +19161,8 @@ function frontmatterField(manifest, field2) {
 function extractPluginToolDescriptions(pluginDir) {
   const out = /* @__PURE__ */ new Map();
   const candidates = [
-    join39(pluginDir, "mcp/dist/index.js"),
-    join39(pluginDir, "mcp/src/index.ts")
+    join40(pluginDir, "mcp/dist/index.js"),
+    join40(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
   for (const path of candidates) {
@@ -18904,7 +19220,7 @@ function listPluginDirs(accountPluginsDir) {
   const platformPlugins = resolve25(PLATFORM_ROOT, "plugins");
   if (existsSync34(platformPlugins)) {
     for (const name of readdirSync23(platformPlugins)) {
-      const dir = join39(platformPlugins, name);
+      const dir = join40(platformPlugins, name);
       try {
         if (statSync23(dir).isDirectory()) out.set(name, dir);
       } catch {
@@ -18914,11 +19230,11 @@ function listPluginDirs(accountPluginsDir) {
   const premiumRoot = resolve25(dirname14(PLATFORM_ROOT), "premium-plugins");
   if (existsSync34(premiumRoot)) {
     for (const bundle of readdirSync23(premiumRoot)) {
-      const bundlePlugins = join39(premiumRoot, bundle, "plugins");
+      const bundlePlugins = join40(premiumRoot, bundle, "plugins");
       if (!existsSync34(bundlePlugins)) continue;
       try {
         for (const name of readdirSync23(bundlePlugins)) {
-          const dir = join39(bundlePlugins, name);
+          const dir = join40(bundlePlugins, name);
           try {
             if (statSync23(dir).isDirectory()) out.set(name, dir);
           } catch {
@@ -18932,7 +19248,7 @@ function listPluginDirs(accountPluginsDir) {
     try {
       for (const name of readdirSync23(accountPluginsDir)) {
         if (out.has(name)) continue;
-        const dir = join39(accountPluginsDir, name);
+        const dir = join40(accountPluginsDir, name);
         try {
           if (statSync23(dir).isDirectory()) out.set(name, dir);
         } catch {
@@ -18951,7 +19267,7 @@ function listAccountPluginNames(accountPluginsDir) {
   try {
     return readdirSync23(accountPluginsDir).filter((name) => {
       try {
-        return statSync23(join39(accountPluginsDir, name)).isDirectory();
+        return statSync23(join40(accountPluginsDir, name)).isDirectory();
       } catch {
         return false;
       }
@@ -18994,7 +19310,7 @@ function computeActivePlugins(accountId) {
   for (const name of emitNames) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
-    const fm = readFrontmatter(join39(dir, "PLUGIN.md"));
+    const fm = readFrontmatter(join40(dir, "PLUGIN.md"));
     if (!fm) continue;
     const description = frontmatterField(`---
 ${fm}
@@ -19011,7 +19327,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync34(join39(dir, "mcp/dist/index.js")) || existsSync34(join39(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync34(join40(dir, "mcp/dist/index.js")) || existsSync34(join40(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -19021,7 +19337,7 @@ ${fm}
     const skillPaths = parseSkillPathsFromFrontmatter(fm);
     const skills = [];
     for (const relPath of skillPaths) {
-      const skillPath = join39(dir, relPath);
+      const skillPath = join40(dir, relPath);
       const skillFm = readFrontmatter(skillPath);
       if (!skillFm) continue;
       const skillName = frontmatterField(`---
@@ -19065,7 +19381,7 @@ function computeSpecialistDomains(accountId) {
   const out = [];
   for (const file of entries2.sort()) {
     if (!file.endsWith(".md")) continue;
-    const fm = readFrontmatter(join39(specialistsDir, file));
+    const fm = readFrontmatter(join40(specialistsDir, file));
     if (!fm) continue;
     const wrapped = `---
 ${fm}
@@ -19159,7 +19475,7 @@ function resolveTunnelUrl() {
   if (!state) return null;
   return `https://${hostname2}.${state.domain}`;
 }
-var TAG26 = "[claude-session-manager:wrapper]";
+var TAG28 = "[claude-session-manager:wrapper]";
 async function refuseIfClaudeAuthDead(c, route, sessionId) {
   const auth = await ensureAuth();
   if (auth.status !== "dead" && auth.status !== "missing") return null;
@@ -19177,12 +19493,12 @@ async function performSpawnWithInitialMessage(args) {
   const aboutOwner = await resolveOwnerProfileBlock(args.senderId, args.userId);
   const ownerMs = Date.now() - ownerStart;
   const aboutOwnerStatus = aboutOwner == null ? "absent" : "ok" in aboutOwner && aboutOwner.ok === false ? `unresolved:${aboutOwner.reason}` : "ok";
-  console.log(`${TAG26} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
+  console.log(`${TAG28} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
   const dormantPlugins = computeDormantPlugins(args.senderId);
   const activePlugins = computeActivePlugins(args.senderId);
   const specialistDomains = computeSpecialistDomains(args.senderId);
   const tunnelUrl = resolveTunnelUrl();
-  console.log(`${TAG26} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
+  console.log(`${TAG28} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
   const upstreamPayload = JSON.stringify({
     senderId: args.senderId,
     // Task 205 — pass userId through to the manager so it lands as
@@ -19209,24 +19525,24 @@ async function performSpawnWithInitialMessage(args) {
     // unshapely values.
     conversationNodeId: args.conversationNodeId
   });
-  console.log(`${TAG26} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
+  console.log(`${TAG28} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
   const forwardStart = Date.now();
   const upstream = await fetch(`${managerBase("claude-session-manager:wrapper")}/public-spawn`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: upstreamPayload
   }).catch((err) => {
-    console.error(`${TAG26} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
+    console.error(`${TAG28} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
     return null;
   });
   if (!upstream) return {
     response: new Response(JSON.stringify({ error: "manager-unreachable" }), { status: 503, headers: { "content-type": "application/json" } }),
     claudeSessionId: null
   };
-  console.log(`${TAG26} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
+  console.log(`${TAG28} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
   if (args.initialMessage) {
     const inputBytes = Buffer.byteLength(args.initialMessage, "utf8");
-    console.log(`${TAG26} initial-message-inlined bytes=${inputBytes}`);
+    console.log(`${TAG28} initial-message-inlined bytes=${inputBytes}`);
   }
   const bodyText = await upstream.text().catch(() => "");
   let claudeSessionId = null;
@@ -19261,7 +19577,7 @@ app23.post("/", async (c) => {
   if (refusal) return refusal;
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(`${TAG26} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
+    console.error(`${TAG28} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
     return c.json({ error: "admin-account-not-resolved" }, 500);
   }
   const userId = getUserIdForSession(cacheKey) ?? void 0;
@@ -19270,7 +19586,7 @@ app23.post("/", async (c) => {
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
   const specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : void 0;
   const model = typeof body.model === "string" && /^[A-Za-z0-9._-]{1,64}$/.test(body.model) ? body.model : void 0;
-  console.log(`${TAG26} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
+  console.log(`${TAG28} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
   const conversationNodeId = cacheKey ? getSessionIdForSession(cacheKey) : void 0;
   const { response, claudeSessionId } = await performSpawnWithInitialMessage({
     senderId,
@@ -19289,14 +19605,14 @@ app23.post("/", async (c) => {
     claudeSessionId,
     senderId
   );
-  console.log(`${TAG26} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
+  console.log(`${TAG28} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
 var claude_sessions_default = app23;
 
 // server/routes/admin/log-ingest.ts
 init_dist();
-var TAG27 = "[log-ingest]";
+var TAG29 = "[log-ingest]";
 var TAG_PATTERN = /^[A-Za-z0-9_:-]{1,32}$/;
 var LEVELS = /* @__PURE__ */ new Set(["debug", "info", "warn", "error"]);
 var MAX_LINE_BYTES = 4096;
@@ -19307,7 +19623,7 @@ function isLoopbackAddr2(addr) {
 app24.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr2(remoteAddr)) {
-    console.error(`${TAG27} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG29} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "log-ingest-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -19316,7 +19632,7 @@ app24.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr2(t));
     if (offender !== void 0) {
-      console.error(`${TAG27} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG29} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "log-ingest-loopback-only" }, 403);
     }
   }
@@ -19354,9 +19670,9 @@ init_dist();
 init_sidebar_sessions();
 init_claude_agent();
 init_account_scope();
-import { join as join40 } from "path";
+import { join as join41 } from "path";
 init_channel_key();
-var TAG28 = "[blocked-tool-notify]";
+var TAG30 = "[blocked-tool-notify]";
 function isLoopbackAddr3(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -19374,18 +19690,18 @@ Answer the permission card in the session's PTY or in Claude Desktop. Some check
 async function sendWhatsApp(account, to, text) {
   const res = resolveSocket(account.accountId);
   if (!res.ok) {
-    console.error(`${TAG28} op=socket-unavailable accountId=${account.accountId} reason=${res.reason}`);
+    console.error(`${TAG30} op=socket-unavailable accountId=${account.accountId} reason=${res.reason}`);
     return false;
   }
   const sent = await sendTextMessage(res.sock, to, text, { accountId: res.accountId });
-  if (!sent.success) console.error(`${TAG28} op=send-failed to=${to} error=${sent.error ?? "unknown"}`);
+  if (!sent.success) console.error(`${TAG30} op=send-failed to=${to} error=${sent.error ?? "unknown"}`);
   return sent.success === true;
 }
 var app25 = new Hono();
 app25.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr3(remoteAddr)) {
-    console.error(`${TAG28} op=reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG30} op=reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "session-blocked-loopback-only" }, 403);
   }
   let body = {};
@@ -19402,17 +19718,17 @@ app25.post("/", async (c) => {
   if (!tool) return c.json({ error: "tool-required" }, 400);
   const text = blockedNotificationText({ sessionId, agentId, tool, blockedForMs });
   const projectDir = findSessionProjectDir(sessionId);
-  const meta = projectDir ? readSidecarMeta(join40(projectDir, `${sessionId}.meta.json`)) : { role: null, channel: null, senderId: null, accountId: null };
+  const meta = projectDir ? readSidecarMeta(join41(projectDir, `${sessionId}.meta.json`)) : { role: null, channel: null, senderId: null, accountId: null };
   const account = validateAccountId2(meta.accountId ?? "");
   if (!account) {
     console.error(
-      `${TAG28} op=account-unresolved sessionId=${sessionId.slice(0, 8)} sidecarAccountId=${meta.accountId ?? "none"}`
+      `${TAG30} op=account-unresolved sessionId=${sessionId.slice(0, 8)} sidecarAccountId=${meta.accountId ?? "none"}`
     );
     return c.json({ delivered: false, channel: "none" }, 200);
   }
   if (meta.role === "admin" && meta.channel === "whatsapp" && meta.senderId) {
     const delivered2 = await sendWhatsApp(account, meta.senderId, text);
-    console.error(`${TAG28} op=notify sessionId=${sessionId.slice(0, 8)} channel=whatsapp delivered=${delivered2}`);
+    console.error(`${TAG30} op=notify sessionId=${sessionId.slice(0, 8)} channel=whatsapp delivered=${delivered2}`);
     return c.json({ delivered: delivered2, channel: "whatsapp" }, 200);
   }
   if (meta.role === "admin" && meta.channel === "telegram" && meta.senderId) {
@@ -19422,11 +19738,11 @@ app25.post("/", async (c) => {
       const chatId = Number(parsed.senderId);
       if (resolved.kind === "one" && Number.isFinite(chatId)) {
         const res = await sendTelegramText(resolved.entry.token, chatId, text);
-        console.error(`${TAG28} op=notify sessionId=${sessionId.slice(0, 8)} channel=telegram delivered=${res.ok}`);
+        console.error(`${TAG30} op=notify sessionId=${sessionId.slice(0, 8)} channel=telegram delivered=${res.ok}`);
         return c.json({ delivered: res.ok, channel: "telegram" }, 200);
       }
       console.error(
-        `${TAG28} op=telegram-unresolved sessionId=${sessionId.slice(0, 8)} botId=${parsed.botId} kind=${resolved.kind}`
+        `${TAG30} op=telegram-unresolved sessionId=${sessionId.slice(0, 8)} botId=${parsed.botId} kind=${resolved.kind}`
       );
     }
   }
@@ -19436,7 +19752,7 @@ app25.post("/", async (c) => {
     if (await sendWhatsApp(account, phone, text)) delivered = true;
   }
   console.error(
-    `${TAG28} op=notify sessionId=${sessionId.slice(0, 8)} channel=house-admin phones=${phones.length} delivered=${delivered}`
+    `${TAG30} op=notify sessionId=${sessionId.slice(0, 8)} channel=house-admin phones=${phones.length} delivered=${delivered}`
   );
   return c.json({ delivered, channel: "house-admin" }, 200);
 });
@@ -19475,18 +19791,18 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
 ]);
 var app26 = new Hono();
 app26.post("/", async (c) => {
-  const TAG60 = "[admin:events]";
+  const TAG62 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG60} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG62} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG60} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG62} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -19609,10 +19925,10 @@ init_claude_agent();
 init_data_path();
 init_sidebar_sessions();
 import { createReadStream as createReadStream2, createWriteStream as createWriteStream2, existsSync as existsSync36 } from "fs";
-import { readdir as readdir4, readFile as readFile9, stat as stat6, mkdir as mkdir2, unlink as unlink3, rename as rename3, rmdir } from "fs/promises";
+import { readdir as readdir4, readFile as readFile9, stat as stat6, mkdir as mkdir3, unlink as unlink3, rename as rename3, rmdir } from "fs/promises";
 import { realpathSync as realpathSync7 } from "fs";
 import { randomUUID as randomUUID6 } from "crypto";
-import { basename as basename13, dirname as dirname15, join as join42, relative as relative6, resolve as resolve28, sep as sep9 } from "path";
+import { basename as basename13, dirname as dirname15, join as join43, relative as relative6, resolve as resolve28, sep as sep9 } from "path";
 import { Readable as Readable2 } from "stream";
 init_attachments();
 
@@ -19936,7 +20252,7 @@ async function cascadeDeleteDocument(params) {
 init_data_path();
 init_neo4j_store();
 import * as fsp from "fs/promises";
-import { resolve as resolve27, relative as relative5, join as join41, basename as basename12, extname, sep as sep8 } from "path";
+import { resolve as resolve27, relative as relative5, join as join42, basename as basename12, extname, sep as sep8 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 import { execFile } from "child_process";
 import { promisify } from "util";
@@ -20018,7 +20334,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join41(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join42(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync(
       "ocrmypdf",
@@ -20080,7 +20396,7 @@ async function readDisplayName(absolute) {
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join41(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join42(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -20101,7 +20417,7 @@ async function walkSubtree(root, dataRoot, out) {
   for (const entry of entries2) {
     if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory() && entry.name === ".uploads-tmp") continue;
-    const abs = join41(root, entry.name);
+    const abs = join42(root, entry.name);
     if (entry.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -20477,7 +20793,7 @@ var UPLOAD_TMP_DIR = ".uploads-tmp";
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta2(absDir, baseName) {
   try {
-    const raw = await readFile9(join42(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile9(join43(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -20532,7 +20848,7 @@ async function servableFilesIn(dirAbs, uuid) {
 }
 async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "directory" && UUID_RE3.test(entry.name)) {
-    const dirAbs = join42(absolute, entry.name);
+    const dirAbs = join43(absolute, entry.name);
     const meta = await readMeta2(dirAbs, entry.name);
     if (meta?.filename) {
       const servable = await servableFilesIn(dirAbs, entry.name);
@@ -20541,7 +20857,7 @@ async function enrich(absolute, entry, accountNames) {
         let size = null;
         let modifiedAt = entry.modifiedAt;
         try {
-          const st = await stat6(join42(dirAbs, innerName));
+          const st = await stat6(join43(dirAbs, innerName));
           size = st.size;
           modifiedAt = st.mtime.toISOString();
         } catch {
@@ -20750,7 +21066,7 @@ app27.get("/", requireAdminSession, async (c) => {
       const childRel = relPath === "" || relPath === "." ? name : `${relPath}/${name}`;
       const protectedEntry = isProtectedFromDeletion(childRel).protected;
       try {
-        const entryPath = join42(absolute, name);
+        const entryPath = join43(absolute, name);
         const s = await stat6(entryPath);
         entries2.push({
           name,
@@ -20779,7 +21095,7 @@ app27.get("/", requireAdminSession, async (c) => {
     const displayPath = buildDisplayPath(relPath, accountNames);
     if (groupReq || isAccountRoot(relPath)) {
       const acctId = relPath.split("/")[1] ?? accountId;
-      const schemaMd = await readFile9(join42(absolute, "SCHEMA.md"), "utf8").catch(() => null);
+      const schemaMd = await readFile9(join43(absolute, "SCHEMA.md"), "utf8").catch(() => null);
       const groups = classifyAccountRoot(schemaMd, entries2.map((e) => e.name));
       console.error(
         `[data-schema] op=classify account=${acctId} status=${groups.parsed ? "ok" : "parse-failed"} reason=${groups.reason} entries=${entries2.length} home=${groups.home.join(",") || "none"} system=${groups.system.length} unknown=${groups.unknown.join(",") || "none"}`
@@ -20817,7 +21133,7 @@ app27.get("/", requireAdminSession, async (c) => {
       for (const name of homeDirs) {
         const base = byName.get(name);
         try {
-          const dirents = await readdir4(join42(absolute, name), { withFileTypes: true });
+          const dirents = await readdir4(join43(absolute, name), { withFileTypes: true });
           const visible = dirents.filter((d) => !d.name.startsWith("."));
           visible.sort((a, b) => {
             const ad = a.isDirectory() ? 0 : 1;
@@ -20882,7 +21198,7 @@ app27.get("/download", requireAdminSession, async (c) => {
       console.error(`[data] op=scratchpad-no-session sessionId="${sessionId.slice(0, 8)}\u2026"`);
       return c.json({ error: "Not found" }, 404);
     }
-    const meta = readSidecarMeta(join42(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join43(projectDir, `${sessionId}.meta.json`));
     if (!meta.accountId || meta.accountId !== accountId) {
       console.error(`[data] account-scope-blocked root="scratchpad" sessionId="${sessionId.slice(0, 8)}\u2026" account=${accountId.slice(0, 8)}\u2026`);
       return c.json({ error: "Not found" }, 404);
@@ -20977,7 +21293,7 @@ async function* walkRegularFiles(dirAbsolute) {
   const dirents = await readdir4(dirAbsolute, { withFileTypes: true });
   for (const d of dirents) {
     if (d.isSymbolicLink()) continue;
-    const child = join42(dirAbsolute, d.name);
+    const child = join43(dirAbsolute, d.name);
     if (d.isDirectory()) {
       yield* walkRegularFiles(child);
       continue;
@@ -21087,7 +21403,7 @@ async function resolveUploadTarget(c, accountId, uid) {
   const base = resolveSharedOrOwnAccountWrite(rawDir, accountId, "POST /api/admin/files/upload");
   if (!base.ok) return { ok: false, status: base.status, error: base.error };
   const relDir = relpath ? dirname15(relpath) : ".";
-  const destRel = relDir === "." ? base.relative : join42(base.relative, relDir);
+  const destRel = relDir === "." ? base.relative : join43(base.relative, relDir);
   if ((0, import_dist.isSharedPath)(destRel)) {
     const gate = gateSharedWrite(base.absolute, destRel, accountId, "POST /api/admin/files/upload");
     if (!gate.ok) return { ok: false, status: gate.status, error: gate.error };
@@ -21104,7 +21420,7 @@ async function resolveUploadTarget(c, accountId, uid) {
   const destDir = relDir === "." ? base.absolute : resolve28(base.absolute, relDir);
   const destPath = resolve28(destDir, finalName);
   if (relpath) {
-    const firstCreated = await mkdir2(destDir, { recursive: true });
+    const firstCreated = await mkdir3(destDir, { recursive: true });
     if (firstCreated) console.error(`[data-upload] op=mkdir uid=${uid} token=${token} dir="${destRel}"`);
   } else {
     const info = await stat6(destDir).catch(() => null);
@@ -21147,7 +21463,7 @@ app27.post("/upload", requireAdminSession, async (c) => {
   console.error(`[data-upload] op=request uid=${uid} account=${accountId} dir="${destRel}" token=${token} rel="${relpath ?? ""}" declaredBytes=${declaredBytes}`);
   const ceiling = dataUploadCeiling();
   const tmpDir = resolve28(DATA_ROOT, "accounts", accountId, UPLOAD_TMP_DIR);
-  await mkdir2(tmpDir, { recursive: true });
+  await mkdir3(tmpDir, { recursive: true });
   const tmpPath = resolve28(tmpDir, `${uid}.part`);
   const out = createWriteStream2(tmpPath);
   const t0 = Date.now();
@@ -21296,7 +21612,7 @@ async function handleChunkUpload(c, accountId) {
     const target = await resolveUploadTarget(c, accountId, uploadId);
     if (!target.ok) return c.json({ error: target.error }, target.status);
     const tmpDir = resolve28(DATA_ROOT, "accounts", accountId, UPLOAD_TMP_DIR);
-    await mkdir2(tmpDir, { recursive: true });
+    await mkdir3(tmpDir, { recursive: true });
     const tmpPath = resolve28(tmpDir, `${uploadId}.part`);
     const out = createWriteStream2(tmpPath);
     const state2 = {
@@ -21473,7 +21789,7 @@ app27.delete("/", requireAdminSession, async (c) => {
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
     const containerDir = dirname15(absolute);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join42(containerDir, `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join43(containerDir, `${stem}.meta.json`) : null;
     const isAttachmentContainer = UUID_RE3.test(stem) && basename13(containerDir) === stem;
     await unlink3(absolute);
     if (sidecarPath) {
@@ -21483,7 +21799,7 @@ app27.delete("/", requireAdminSession, async (c) => {
       }
     }
     if (isAttachmentContainer) {
-      await unlink3(join42(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
+      await unlink3(join43(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
       });
       await rmdir(containerDir).catch(() => {
       });
@@ -21542,7 +21858,7 @@ app27.post("/folder", requireAdminSession, async (c) => {
   try {
     const info = await stat6(parent.absolute);
     if (!info.isDirectory()) return c.json({ error: "Parent is not a directory" }, 400);
-    await mkdir2(newAbs, { recursive: false });
+    await mkdir3(newAbs, { recursive: false });
   } catch (err) {
     const code = err.code;
     if (code === "EEXIST") return c.json({ error: "A file or folder with that name already exists" }, 409);
@@ -22609,7 +22925,7 @@ function isHiddenByDefault(label) {
 // server/lib/top-level-labels.ts
 var import_dist6 = __toESM(require_dist5(), 1);
 import { readdirSync as readdirSync24, readFileSync as readFileSync36 } from "fs";
-import { join as join43, resolve as resolve29 } from "path";
+import { join as join44, resolve as resolve29 } from "path";
 var STATIC_TOP_LEVEL_LABELS = Object.freeze(
   /* @__PURE__ */ new Set([
     // Base-schema infra (schema-base.md has no top-level section).
@@ -22713,7 +23029,7 @@ function parseTopLevelLabels(content) {
 }
 function resolveReferencesDir() {
   if (process.env.MAXY_PLATFORM_ROOT) {
-    return join43(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
+    return join44(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
   }
   return resolve29(import.meta.dirname, "../../../plugins/memory/references");
 }
@@ -22723,7 +23039,7 @@ function parseTableTopLevelLabels(referencesDir) {
   try {
     const fileNames = readdirSync24(referencesDir).filter((f) => f.startsWith("schema-") && f.endsWith(".md")).sort();
     for (const fileName of fileNames) {
-      const content = readFileSync36(join43(referencesDir, fileName), "utf-8");
+      const content = readFileSync36(join44(referencesDir, fileName), "utf-8");
       const parsed = parseTopLevelLabels(content);
       if (parsed.length > 0) contributingFiles.push(fileName);
       for (const label of parsed) labels.add(label);
@@ -24503,24 +24819,24 @@ init_session_store();
 import { randomUUID as randomUUID8 } from "crypto";
 
 // server/wa-descriptor.ts
-import { resolve as resolve31, join as join44 } from "path";
+import { resolve as resolve31, join as join45 } from "path";
 function waGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function waServerPath() {
-  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve31(process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
+  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve31(process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
 }
 function waChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: waGatewayUrl(), serverPath: waServerPath() };
 }
 
 // server/telegram-descriptor.ts
-import { resolve as resolve32, join as join45 } from "path";
+import { resolve as resolve32, join as join46 } from "path";
 function telegramGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve32(process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, ".."), "services/telegram-channel/dist/server.js");
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve32(process.env.MAXY_PLATFORM_ROOT ?? join46(__dirname, ".."), "services/telegram-channel/dist/server.js");
 }
 function telegramChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: telegramGatewayUrl(), serverPath: telegramServerPath() };
@@ -24817,10 +25133,10 @@ var system_stats_default = app42;
 init_dist();
 init_neo4j_store();
 import { existsSync as existsSync38, readFileSync as readFileSync37 } from "fs";
-import { resolve as resolve33, join as join46 } from "path";
+import { resolve as resolve33, join as join47 } from "path";
 var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve33(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join46(PLATFORM_ROOT4, "config", "brand.json");
+var brandJsonPath = join47(PLATFORM_ROOT4, "config", "brand.json");
 if (existsSync38(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync37(brandJsonPath, "utf-8"));
@@ -25082,7 +25398,7 @@ function managerLogFollowUrl(sessionId, opts) {
 }
 
 // server/routes/admin/linkedin-ingest.ts
-var TAG29 = "[linkedin-ingest-route]";
+var TAG31 = "[linkedin-ingest-route]";
 var UUID4 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
 var LINKEDIN_URL = /^https:\/\/www\.linkedin\.com\//;
@@ -25207,28 +25523,28 @@ app44.post("/", requireIngestToken, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(TAG29 + " rejected status=400 reason=schema:body-not-json");
+    console.error(TAG31 + " rejected status=400 reason=schema:body-not-json");
     return c.json({ ok: false, error: "schema", reason: "body-not-json" }, 400);
   }
   const v = validate2(body);
   if (!v.ok) {
-    console.error(TAG29 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
+    console.error(TAG31 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
     return c.json({ ok: false, error: v.error, reason: v.reason, missing: v.missing }, v.status);
   }
   const envelope = v.envelope;
   const senderId = c.var.ingestAccountId ?? "";
   if (!senderId) {
-    console.error(TAG29 + " rejected status=500 reason=admin-account-not-resolved");
+    console.error(TAG31 + " rejected status=500 reason=admin-account-not-resolved");
     return c.json({ ok: false, error: "admin-account-not-resolved" }, 500);
   }
   const payloadBytes = JSON.stringify(envelope).length;
   console.log(
-    TAG29 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
+    TAG31 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
   const sessionId = randomUUID9();
-  console.log(TAG29 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
+  console.log(TAG31 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -25241,12 +25557,12 @@ app44.post("/", requireIngestToken, async (c) => {
   });
   if ("error" in spawned) {
     console.error(
-      TAG29 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
+      TAG31 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
     );
     return c.json({ ok: false, error: "dispatch-failed", upstreamStatus: spawned.status, detail: spawned.error }, 502);
   }
   console.log(
-    TAG29 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
+    TAG31 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
@@ -25256,7 +25572,7 @@ var linkedin_ingest_default = app44;
 init_dist();
 init_neo4j_store();
 import neo4j2 from "neo4j-driver";
-var TAG30 = "[post-turn-context]";
+var TAG32 = "[post-turn-context]";
 var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -25298,7 +25614,7 @@ var app45 = new Hono();
 app45.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr4(remoteAddr)) {
-    console.error(`${TAG30} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG32} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "post-turn-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -25307,7 +25623,7 @@ app45.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr4(t));
     if (offender !== void 0) {
-      console.error(`${TAG30} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG32} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "post-turn-context-loopback-only" }, 403);
     }
   }
@@ -25339,7 +25655,7 @@ app45.get("/", async (c) => {
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
     const total = Date.now() - started2;
     console.log(
-      `${TAG30} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
+      `${TAG32} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
@@ -25348,7 +25664,7 @@ app45.get("/", async (c) => {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG30} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
+      `${TAG32} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `post-turn-context unavailable: ${message}` }, 503);
   } finally {
@@ -25465,7 +25781,7 @@ function formatPreviousContext(writes) {
 }
 
 // server/routes/admin/public-session-context.ts
-var TAG31 = "[public-session-context]";
+var TAG33 = "[public-session-context]";
 function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -25473,7 +25789,7 @@ var app46 = new Hono();
 app46.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr5(remoteAddr)) {
-    console.error(`${TAG31} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG33} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -25482,7 +25798,7 @@ app46.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr5(t));
     if (offender !== void 0) {
-      console.error(`${TAG31} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG33} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-context-loopback-only" }, 403);
     }
   }
@@ -25496,14 +25812,14 @@ app46.get("/", async (c) => {
     const writes = await fetchSliceWrites(session, sliceToken, accountId);
     const total = Date.now() - started2;
     console.log(
-      `${TAG31} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
+      `${TAG33} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
     return c.json({ writes });
   } catch (err) {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG31} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
+      `${TAG33} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `public-session-context unavailable: ${message}` }, 503);
   } finally {
@@ -25525,7 +25841,7 @@ function getWebchatGateway() {
 }
 
 // server/routes/admin/public-session-exit.ts
-var TAG32 = "[public-session-exit-route]";
+var TAG34 = "[public-session-exit-route]";
 function isLoopbackAddr6(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -25533,7 +25849,7 @@ var app47 = new Hono();
 app47.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr6(remoteAddr)) {
-    console.error(`${TAG32} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG34} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-exit-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -25542,7 +25858,7 @@ app47.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr6(t));
     if (offender !== void 0) {
-      console.error(`${TAG32} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG34} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-exit-loopback-only" }, 403);
     }
   }
@@ -25556,7 +25872,7 @@ app47.post("/", async (c) => {
   if (!sessionId) return c.json({ error: "sessionId required" }, 400);
   const gateway = getWebchatGateway();
   if (!gateway) {
-    console.error(`${TAG32} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG34} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "webchat-gateway-unset" }, 503);
   }
   gateway.handlePublicSessionExit(sessionId);
@@ -25566,7 +25882,7 @@ var public_session_exit_default = app47;
 
 // server/routes/admin/access-session-evict.ts
 init_dist();
-var TAG33 = "[access-session-evict]";
+var TAG35 = "[access-session-evict]";
 function isLoopbackAddr7(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -25574,7 +25890,7 @@ var app48 = new Hono();
 app48.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr7(remoteAddr)) {
-    console.error(`${TAG33} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG35} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "access-session-evict-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -25583,7 +25899,7 @@ app48.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr7(t));
     if (offender !== void 0) {
-      console.error(`${TAG33} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG35} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "access-session-evict-loopback-only" }, 403);
     }
   }
@@ -25596,7 +25912,7 @@ app48.post("/", async (c) => {
   const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
   if (!grantId) return c.json({ error: "grantId required" }, 400);
   const dropped = evictAccessSessionsByGrant(grantId);
-  console.log(`${TAG33} grantId=${grantId} dropped=${dropped}`);
+  console.log(`${TAG35} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
 var access_session_evict_default = app48;
@@ -25604,7 +25920,7 @@ var access_session_evict_default = app48;
 // server/routes/admin/enrol-person.ts
 init_dist();
 init_normalize();
-var TAG34 = "[enrol]";
+var TAG36 = "[enrol]";
 function isLoopbackAddr8(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -25613,7 +25929,7 @@ var app49 = new Hono();
 app49.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr8(remoteAddr)) {
-    console.error(`${TAG34} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG36} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "enrol-person-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -25622,7 +25938,7 @@ app49.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr8(t));
     if (offender !== void 0) {
-      console.error(`${TAG34} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG36} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "enrol-person-loopback-only" }, 403);
     }
   }
@@ -25647,7 +25963,7 @@ app49.post("/", async (c) => {
   }
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG34} op=person result=no-account-id`);
+    console.error(`${TAG36} op=person result=no-account-id`);
     return c.json({ error: "no-account-id" }, 500);
   }
   let personId;
@@ -25655,7 +25971,7 @@ app49.post("/", async (c) => {
     personId = await enrolPerson({ accountId, phone, email, agentSlug });
   } catch (err) {
     console.error(
-      `${TAG34} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG36} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "enrol-failed" }, 500);
   }
@@ -25665,11 +25981,11 @@ app49.post("/", async (c) => {
     if (g) grant = { grantId: g.grantId, status: g.status, contactValue: g.contactValue };
   } catch (err) {
     console.error(
-      `${TAG34} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG36} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   console.log(
-    `${TAG34} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
+    `${TAG36} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
   );
   return c.json({ personId, grant }, 200);
 });
@@ -25776,7 +26092,7 @@ init_account_scope();
 init_neo4j_store();
 import { existsSync as existsSync40 } from "fs";
 import { randomUUID as randomUUID10 } from "crypto";
-import { join as join48 } from "path";
+import { join as join49 } from "path";
 
 // server/lib/calendar-ics.ts
 var CRLF = "\r\n";
@@ -25877,7 +26193,7 @@ function countVEvents(ics) {
 
 // server/lib/calendar-availability.ts
 import { readFileSync as readFileSync39 } from "fs";
-import { join as join47 } from "path";
+import { join as join48 } from "path";
 var AVAILABILITY_FILENAME = "calendar-availability.json";
 var REQUIRED_KEYS = [
   "timezone",
@@ -25886,7 +26202,7 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path = join47(accountDir, AVAILABILITY_FILENAME);
+  const path = join48(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
     raw = readFileSync39(path, "utf-8");
@@ -26444,7 +26760,7 @@ app51.get("/booking-link", requireAdminSession, (c) => {
   }
   const id82 = account.accountId.slice(0, 8);
   try {
-    if (!existsSync40(join48(account.accountDir, AVAILABILITY_FILENAME))) {
+    if (!existsSync40(join49(account.accountDir, AVAILABILITY_FILENAME))) {
       console.log(`[calendar] op=booking-link accountId=${id82} bookingDomain=none source=availability-config`);
       return c.json({ bookingDomain: null });
     }
@@ -26467,7 +26783,7 @@ init_dist();
 init_helpers();
 init_account_scope();
 import { existsSync as existsSync41, readFileSync as readFileSync40 } from "fs";
-import { join as join49 } from "path";
+import { join as join50 } from "path";
 var app52 = new Hono();
 var PORTAL_FILENAME = "data-portal.json";
 app52.get("/portal-link", requireAdminSession, (c) => {
@@ -26478,7 +26794,7 @@ app52.get("/portal-link", requireAdminSession, (c) => {
   }
   const id82 = account.accountId.slice(0, 8);
   try {
-    const path = join49(account.accountDir, PORTAL_FILENAME);
+    const path = join50(account.accountDir, PORTAL_FILENAME);
     if (!existsSync41(path)) {
       console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=none source=data-portal-config`);
       return c.json({ portalDomain: null });
@@ -27608,7 +27924,7 @@ init_helpers();
 init_claude_agent();
 init_route_cache();
 init_neo4j_store();
-import { basename as basename15, join as join50 } from "path";
+import { basename as basename15, join as join51 } from "path";
 
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
@@ -27629,7 +27945,7 @@ function toNum(v) {
 
 // server/routes/admin/tasks-list.ts
 init_sidebar_sessions();
-var TAG35 = "[task-timer]";
+var TAG37 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
 var app55 = new Hono();
@@ -27637,12 +27953,12 @@ app55.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG35} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG37} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   const cacheStart = Date.now();
   const cached3 = await getOrCompute("tasks-list", accountId, () => computeTaskList(accountId));
-  console.log(`${TAG35} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
+  console.log(`${TAG37} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
   if (cached3.value === null) {
     return c.json({ error: "tasks-list-failed" }, 500);
   }
@@ -27743,13 +28059,13 @@ async function computeTaskList(accountId) {
       orphans = orphanResult.records.length > 0 ? toNum(orphanResult.records[0].get("orphans")) : 0;
     } catch (err) {
       console.error(
-        `${TAG35} op=session-orphans-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG37} op=session-orphans-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
       );
       orphans = -1;
     }
     if (orphans > 0) {
       console.error(
-        `${TAG35} op=session-orphans account=${accountId} orphans=${orphans} detail="task marked for a session spawn that never linked; the spawned session is unreachable from its row"`
+        `${TAG37} op=session-orphans account=${accountId} orphans=${orphans} detail="task marked for a session spawn that never linked; the spawned session is unreachable from its row"`
       );
     }
     let orphanEntries = 0;
@@ -27768,14 +28084,14 @@ async function computeTaskList(accountId) {
       orphanAdjustments = orphanTime.records.length > 0 ? toNum(orphanTime.records[0].get("orphanAdjustments")) : 0;
     } catch (err) {
       console.error(
-        `${TAG35} op=orphan-time-records-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG37} op=orphan-time-records-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
       );
       orphanEntries = -1;
       orphanAdjustments = -1;
     }
     if (orphanEntries > 0 || orphanAdjustments > 0) {
       console.error(
-        `${TAG35} op=orphan-time-records account=${accountId} orphanEntries=${orphanEntries} orphanAdjustments=${orphanAdjustments} detail="time records whose task no longer exists; something removed the task without its records"`
+        `${TAG37} op=orphan-time-records account=${accountId} orphanEntries=${orphanEntries} orphanAdjustments=${orphanAdjustments} detail="time records whose task no longer exists; something removed the task without its records"`
       );
     }
     const linkedIds = [...open3, ...completed].map((r) => r.sessionId).filter((s) => s !== null);
@@ -27785,10 +28101,10 @@ async function computeTaskList(accountId) {
       dangling = 0;
     } else if (cfg !== null) {
       try {
-        const walk = enumerateJsonlsWithSkips(join50(cfg, "projects"));
+        const walk = enumerateJsonlsWithSkips(join51(cfg, "projects"));
         if (walk.skipped > 0) {
           console.error(
-            `${TAG35} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
+            `${TAG37} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
           );
           dangling = null;
         } else {
@@ -27797,28 +28113,28 @@ async function computeTaskList(accountId) {
         }
       } catch (err) {
         console.error(
-          `${TAG35} op=session-dangling-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+          `${TAG37} op=session-dangling-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
         );
         dangling = null;
       }
     }
     if (dangling !== null && dangling > 0) {
       console.error(
-        `${TAG35} op=session-dangling account=${accountId} dangling=${dangling} linked=${linkedIds.length} detail="a task links a session with no JSONL on disk; clicking it will not resume"`
+        `${TAG37} op=session-dangling account=${accountId} dangling=${dangling} linked=${linkedIds.length} detail="a task links a session with no JSONL on disk; clicking it will not resume"`
       );
     }
     const returned = result.records.length;
     if (returned < graphTotal) {
       console.error(
-        `${TAG35} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
+        `${TAG37} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
       );
     }
     console.log(
-      `${TAG35} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned} sessionLinked=${sessionLinked} sessionOrphans=${orphans < 0 ? "n/a" : orphans} sessionDangling=${dangling === null ? "n/a" : dangling}`
+      `${TAG37} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned} sessionLinked=${sessionLinked} sessionOrphans=${orphans < 0 ? "n/a" : orphans} sessionDangling=${dangling === null ? "n/a" : dangling}`
     );
     return { open: open3, completed };
   } catch (err) {
-    console.error(`${TAG35} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG37} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   } finally {
     await session.close();
@@ -27833,7 +28149,7 @@ init_claude_agent();
 init_route_cache();
 init_neo4j_store();
 import { randomUUID as randomUUID11 } from "crypto";
-var TAG36 = "[task-timer]";
+var TAG38 = "[task-timer]";
 var app56 = new Hono();
 app56.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -27848,7 +28164,7 @@ app56.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG36} op=timer-start rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG38} op=timer-start rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -27859,7 +28175,7 @@ app56.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (target.records.length === 0) {
-      console.error(`${TAG36} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
+      console.error(`${TAG38} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const open3 = await session.run(
@@ -27871,7 +28187,7 @@ app56.post("/", requireAdminSession, async (c) => {
     const priorEntryId = open3.records[0]?.get("entryId");
     const priorStartedAt = open3.records[0]?.get("startedAt");
     if (priorEntryId) {
-      console.log(`${TAG36} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
+      console.log(`${TAG38} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
@@ -27882,11 +28198,11 @@ app56.post("/", requireAdminSession, async (c) => {
        CREATE (te)-[:LOGGED_AGAINST]->(t)`,
       { taskId, accountId, entryId, now }
     );
-    console.log(`${TAG36} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
+    console.log(`${TAG38} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: true, entryId, startedAt: now });
   } catch (err) {
-    console.error(`${TAG36} op=start error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG38} op=start error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-start-failed" }, 500);
   } finally {
     await session.close();
@@ -27901,7 +28217,7 @@ init_claude_agent();
 init_route_cache();
 init_neo4j_store();
 import neo4j4 from "neo4j-driver";
-var TAG37 = "[task-timer]";
+var TAG39 = "[task-timer]";
 var app57 = new Hono();
 app57.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -27916,7 +28232,7 @@ app57.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG37} op=timer-stop rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG39} op=timer-stop rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -27937,7 +28253,7 @@ app57.post("/", requireAdminSession, async (c) => {
         { taskId, accountId }
       );
       const secondsLogged2 = toNum(cur.records[0]?.get("secondsLogged"));
-      console.log(`${TAG37} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
+      console.log(`${TAG39} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: false, seconds: 0, secondsLogged: secondsLogged2 });
     }
@@ -27961,12 +28277,12 @@ app57.post("/", requireAdminSession, async (c) => {
     const sumEntries = toNum(verify.records[0]?.get("sumEntries"));
     const sumAdjustments = toNum(verify.records[0]?.get("sumAdjustments"));
     const secondsLogged = toNum(verify.records[0]?.get("secondsLogged"));
-    console.log(`${TAG37} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
-    console.log(`${TAG37} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
+    console.log(`${TAG39} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
+    console.log(`${TAG39} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: false, seconds, secondsLogged });
   } catch (err) {
-    console.error(`${TAG37} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG39} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-stop-failed" }, 500);
   } finally {
     await session.close();
@@ -27980,7 +28296,7 @@ init_helpers();
 init_claude_agent();
 init_route_cache();
 init_neo4j_store();
-var TAG38 = "[task-timer]";
+var TAG40 = "[task-timer]";
 var app58 = new Hono();
 app58.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -27995,7 +28311,7 @@ app58.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG38} op=complete rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG40} op=complete rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -28011,11 +28327,11 @@ app58.post("/", requireAdminSession, async (c) => {
       return c.json({ error: "task-not-found" }, 404);
     }
     const secondsLogged = toNum(result.records[0].get("secondsLogged"));
-    console.log(`${TAG38} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
+    console.log(`${TAG40} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, status: "completed", secondsLogged });
   } catch (err) {
-    console.error(`${TAG38} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG40} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-complete-failed" }, 500);
   } finally {
     await session.close();
@@ -28031,7 +28347,7 @@ init_route_cache();
 init_neo4j_store();
 import { randomUUID as randomUUID12 } from "crypto";
 import neo4j5 from "neo4j-driver";
-var TAG39 = "[task-time-adjust]";
+var TAG41 = "[task-time-adjust]";
 var app59 = new Hono();
 app59.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -28041,23 +28357,23 @@ app59.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG39} op=reject reason=bad-json`);
+    console.error(`${TAG41} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG39} op=time-adjust rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG41} op=time-adjust rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const newSeconds = body.newSeconds;
   if (typeof newSeconds !== "number" || !Number.isInteger(newSeconds) || newSeconds < 0) {
-    console.error(`${TAG39} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
+    console.error(`${TAG41} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
   const adjustmentId = randomUUID12();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`${TAG39} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
+  console.log(`${TAG41} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
   try {
     const guard = await session.run(
@@ -28067,12 +28383,12 @@ app59.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG39} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG41} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const openCount = toNum(guard.records[0].get("openCount"));
     if (openCount > 0) {
-      console.error(`${TAG39} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG41} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-timer-running" }, 409);
     }
     const previousSeconds = toNum(guard.records[0].get("previousSeconds"));
@@ -28098,11 +28414,11 @@ app59.post("/", requireAdminSession, async (c) => {
       }
     );
     const secondsLoggedAfter = toNum(write.records[0]?.get("secondsLoggedAfter"));
-    console.log(`${TAG39} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
+    console.log(`${TAG41} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, secondsLogged: secondsLoggedAfter });
   } catch (err) {
-    console.error(`${TAG39} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG41} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-time-adjust-failed" }, 500);
   } finally {
     await session.close();
@@ -28117,7 +28433,7 @@ init_claude_agent();
 init_route_cache();
 init_neo4j_store();
 import { randomUUID as randomUUID13 } from "crypto";
-var TAG40 = "[task-delete]";
+var TAG42 = "[task-delete]";
 var app60 = new Hono();
 app60.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -28127,18 +28443,18 @@ app60.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG40} op=reject reason=bad-json`);
+    console.error(`${TAG42} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const deletionId = randomUUID13();
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG40} op=reject reason=${reason} deletionId=${deletionId} accountId=${accountId}`);
+    console.error(`${TAG42} op=reject reason=${reason} deletionId=${deletionId} accountId=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   console.log(
-    `${TAG40} op=request deletionId=${deletionId} taskId=${taskId} accountId=${accountId} confirmed=${body.confirmed === true}`
+    `${TAG42} op=request deletionId=${deletionId} taskId=${taskId} accountId=${accountId} confirmed=${body.confirmed === true}`
   );
   const session = getSession();
   try {
@@ -28154,18 +28470,18 @@ app60.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG40} op=reject reason=no-task deletionId=${deletionId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG42} op=reject reason=no-task deletionId=${deletionId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const timeEntries = toNum(guard.records[0].get("timeEntries"));
     const openCount = toNum(guard.records[0].get("openCount"));
     const adjustments = toNum(guard.records[0].get("adjustments"));
     console.log(
-      `${TAG40} op=guard deletionId=${deletionId} taskId=${taskId} openCount=${openCount} timeEntries=${timeEntries} adjustments=${adjustments}`
+      `${TAG42} op=guard deletionId=${deletionId} taskId=${taskId} openCount=${openCount} timeEntries=${timeEntries} adjustments=${adjustments}`
     );
     if (openCount > 0) {
       console.error(
-        `${TAG40} op=reject reason=running deletionId=${deletionId} taskId=${taskId} openCount=${openCount}`
+        `${TAG42} op=reject reason=running deletionId=${deletionId} taskId=${taskId} openCount=${openCount}`
       );
       return c.json({ error: "task-timer-running" }, 409);
     }
@@ -28201,18 +28517,18 @@ app60.post("/", requireAdminSession, async (c) => {
     const adjustmentsLeft = toNum(after.records[0]?.get("adjustmentsLeft"));
     const remaining = taskLeft + entriesLeft + adjustmentsLeft;
     console.log(
-      `${TAG40} op=persisted deletionId=${deletionId} taskId=${taskId} tasksDeleted=${tasksDeleted} timeEntriesDeleted=${timeEntriesDeleted} adjustmentsDeleted=${adjustmentsDeleted} remaining=${remaining}`
+      `${TAG42} op=persisted deletionId=${deletionId} taskId=${taskId} tasksDeleted=${tasksDeleted} timeEntriesDeleted=${timeEntriesDeleted} adjustmentsDeleted=${adjustmentsDeleted} remaining=${remaining}`
     );
     if (remaining > 0) {
       console.error(
-        `${TAG40} op=incomplete deletionId=${deletionId} taskId=${taskId} taskLeft=${taskLeft} entriesLeft=${entriesLeft} adjustmentsLeft=${adjustmentsLeft} detail="the delete returned but rows for this taskId survive"`
+        `${TAG42} op=incomplete deletionId=${deletionId} taskId=${taskId} taskLeft=${taskLeft} entriesLeft=${entriesLeft} adjustmentsLeft=${adjustmentsLeft} detail="the delete returned but rows for this taskId survive"`
       );
     }
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, tasksDeleted, timeEntriesDeleted, adjustmentsDeleted, remaining });
   } catch (err) {
     console.error(
-      `${TAG40} op=error deletionId=${deletionId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG42} op=error deletionId=${deletionId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "task-delete-failed" }, 500);
   } finally {
@@ -28315,7 +28631,7 @@ async function resolveAssignableAdmins(accountId, accountsDir = ACCOUNTS_DIR) {
 }
 
 // server/routes/admin/task-assign.ts
-var TAG41 = "[task-assign]";
+var TAG43 = "[task-assign]";
 var app61 = new Hono();
 app61.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -28330,7 +28646,7 @@ app61.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG41} op=assign rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG43} op=assign rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const rawAssignee = body.assigneeUserId;
@@ -28342,7 +28658,7 @@ app61.post("/", requireAdminSession, async (c) => {
     const { ids } = await resolveAllowedAssigneeIds(accountId);
     if (!ids.has(assigneeUserId)) {
       console.error(
-        `${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
+        `${TAG43} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
       );
       return c.json({ error: "assignee-not-in-roster" }, 403);
     }
@@ -28364,7 +28680,7 @@ app61.post("/", requireAdminSession, async (c) => {
         `MATCH (t:Task {taskId: $taskId, accountId: $accountId}) SET t.updatedAt = $now`,
         { taskId, accountId, now }
       );
-      console.log(`${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
+      console.log(`${TAG43} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, assigneeUserId: null, assigneeName: null });
     }
@@ -28380,7 +28696,7 @@ app61.post("/", requireAdminSession, async (c) => {
     );
     if (set.records.length === 0) {
       console.error(
-        `${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
+        `${TAG43} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
       );
       return c.json({ error: "assignee-no-admin-node" }, 409);
     }
@@ -28388,12 +28704,12 @@ app61.post("/", requireAdminSession, async (c) => {
     const family = set.records[0].get("familyName") ?? null;
     const assigneeName = given && given.trim().length > 0 ? family && family.trim().length > 0 ? `${given.trim()} ${family.trim()}` : given.trim() : null;
     console.log(
-      `${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
+      `${TAG43} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
     );
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, assigneeUserId, assigneeName });
   } catch (err) {
-    console.error(`${TAG41} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG43} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-assign-failed" }, 500);
   } finally {
     await session.close();
@@ -28406,13 +28722,13 @@ init_dist();
 init_helpers();
 init_claude_agent();
 init_neo4j_store();
-var TAG42 = "[task-session]";
+var TAG44 = "[task-session]";
 var app62 = new Hono();
 app62.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG42} op=request auth-rejected reason="no account for session"`);
+    console.error(`${TAG44} op=request auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let body;
@@ -28424,7 +28740,7 @@ app62.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG42} op=request rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG44} op=request rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const session = getSession();
@@ -28438,14 +28754,14 @@ app62.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (found.records.length === 0) {
-      console.error(`${TAG42} op=request taskId=${taskId} account=${accountId} result=task-not-found`);
+      console.error(`${TAG44} op=request taskId=${taskId} account=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const title = found.records[0].get("name") ?? "";
     const sessionId = found.records[0].get("sessionId") ?? null;
     const description = found.records[0].get("description") ?? "";
     const notes = found.records[0].get("notes") ?? "";
-    console.log(`${TAG42} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
+    console.log(`${TAG44} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
     if (sessionId !== null) return c.json({ sessionId, title, description, notes });
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const stamped = await session.run(
@@ -28455,10 +28771,10 @@ app62.post("/", requireAdminSession, async (c) => {
       { taskId, accountId, now }
     );
     const at = stamped.records[0]?.get("at") ?? void 0;
-    console.log(`${TAG42} op=marker taskId=${taskId} stamped=${at !== void 0}`);
+    console.log(`${TAG44} op=marker taskId=${taskId} stamped=${at !== void 0}`);
     return c.json({ sessionId: null, title, description, notes });
   } catch (err) {
-    console.error(`${TAG42} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG44} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-session-open-failed" }, 500);
   } finally {
     await session.close();
@@ -28472,13 +28788,13 @@ init_helpers();
 init_claude_agent();
 init_neo4j_store();
 init_route_cache();
-var TAG43 = "[task-session]";
+var TAG45 = "[task-session]";
 var app63 = new Hono();
 app63.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG43} op=link auth-rejected reason="no account for session"`);
+    console.error(`${TAG45} op=link auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let body;
@@ -28490,12 +28806,12 @@ app63.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG43} op=link rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG45} op=link rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const sessionId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : "";
   if (!sessionId) {
-    console.error(`${TAG43} op=link rejected reason=missing-sessionId taskId=${taskId} account=${accountId}`);
+    console.error(`${TAG45} op=link rejected reason=missing-sessionId taskId=${taskId} account=${accountId}`);
     return c.json({ error: "sessionId required" }, 400);
   }
   const session = getSession();
@@ -28509,13 +28825,13 @@ app63.post("/", requireAdminSession, async (c) => {
       { taskId, accountId, sessionId }
     );
     if (state.records.length === 0) {
-      console.error(`${TAG43} op=link taskId=${taskId} account=${accountId} result=task-not-found`);
+      console.error(`${TAG45} op=link taskId=${taskId} account=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const conversationExists = state.records[0].get("conversationExists") === true;
     const priorSessionIds = (state.records[0].get("priorSessionIds") ?? []).filter((s) => typeof s === "string");
     if (!conversationExists) {
-      console.error(`${TAG43} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=conversation-absent`);
+      console.error(`${TAG45} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=conversation-absent`);
       return c.json({ linked: false, created: false, repointedFrom: null });
     }
     const stale = priorSessionIds.filter((s) => s !== sessionId);
@@ -28541,18 +28857,18 @@ app63.post("/", requireAdminSession, async (c) => {
     const repointedFrom = stale.length > 0 ? stale[0] : null;
     if (!linked) {
       console.error(
-        `${TAG43} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=edge-absent-after-merge linkedTo=${linkedTo ?? "none"}`
+        `${TAG45} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=edge-absent-after-merge linkedTo=${linkedTo ?? "none"}`
       );
       return c.json({ linked: false, created: false, repointedFrom });
     }
     console.log(
-      `${TAG43} op=link taskId=${taskId} sessionId=${sessionId} created=${created} repointedFrom=${repointedFrom ?? "none"}`
+      `${TAG45} op=link taskId=${taskId} sessionId=${sessionId} created=${created} repointedFrom=${repointedFrom ?? "none"}`
     );
     invalidate("tasks-list", accountId);
     return c.json({ linked: true, created, repointedFrom });
   } catch (err) {
     console.error(
-      `${TAG43} op=link-failed taskId=${taskId} sessionId=${sessionId} reason="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG45} op=link-failed taskId=${taskId} sessionId=${sessionId} reason="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "task-session-link-failed" }, 500);
   } finally {
@@ -28565,21 +28881,21 @@ var task_session_link_default = app63;
 init_dist();
 init_helpers();
 init_claude_agent();
-var TAG44 = "[admin-users]";
+var TAG46 = "[admin-users]";
 var app64 = new Hono();
 app64.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG44} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG46} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   try {
     const users = await resolveAssignableAdmins(accountId);
-    console.log(`${TAG44} op=list account=${accountId} count=${users.length}`);
+    console.log(`${TAG46} op=list account=${accountId} count=${users.length}`);
     return c.json({ ok: true, users });
   } catch (err) {
-    console.error(`${TAG44} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG46} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "admin-users-list-failed" }, 500);
   }
 });
@@ -28593,7 +28909,7 @@ init_account();
 init_neo4j_store();
 init_src2();
 import { resolve as resolve38 } from "path";
-var TAG45 = "[admin:routines]";
+var TAG47 = "[admin:routines]";
 function scopeFor(d, houseDir, houseAccountId) {
   if (d.channel !== "whatsapp") return null;
   if (d.label === "Account manager") return boundSubAccountFor(houseDir, d.destination);
@@ -28611,7 +28927,7 @@ var app65 = new Hono();
 app65.get("/", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
-    console.error(`${TAG45} op=destinations auth-rejected reason="no account for session"`);
+    console.error(`${TAG47} op=destinations auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let houseAccountId = null;
@@ -28619,7 +28935,7 @@ app65.get("/", requireAdminSession, async (c) => {
     houseAccountId = resolveHouseOrSoleAccountId(ACCOUNTS_DIR);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG45} op=destinations account=${accountId.slice(0, 8)} outcome=house-unresolved reason="${message}"`);
+    console.error(`${TAG47} op=destinations account=${accountId.slice(0, 8)} outcome=house-unresolved reason="${message}"`);
   }
   const destinations = listDispatchDestinations({ accountsDir: ACCOUNTS_DIR, houseAccountId, accountId });
   const houseDir = houseAccountId === null ? null : resolve38(ACCOUNTS_DIR, houseAccountId);
@@ -28670,7 +28986,7 @@ app65.get("/", requireAdminSession, async (c) => {
   const scopes = [...byScope.keys()];
   const nameScope = scopes.length === 0 ? "none" : scopes.every((s) => s === houseAccountId) ? "house" : scopes.some((s) => s === houseAccountId) ? "mixed" : "account";
   console.log(
-    `${TAG45} op=destinations account=${accountId.slice(0, 8)} count=${destinations.length} named=${named} unnamed=${destinations.length - named} nameScope=${nameScope}` + (houseAccountId === null ? " outcome=house-unresolved" : "") + (namesUnresolved === null ? "" : ` outcome=names-unresolved reason="${namesUnresolved}"`)
+    `${TAG47} op=destinations account=${accountId.slice(0, 8)} count=${destinations.length} named=${named} unnamed=${destinations.length - named} nameScope=${nameScope}` + (houseAccountId === null ? " outcome=house-unresolved" : "") + (namesUnresolved === null ? "" : ` outcome=names-unresolved reason="${namesUnresolved}"`)
   );
   return c.json({ destinations });
 });
@@ -28685,7 +29001,7 @@ import { readdirSync as readdirSync28 } from "fs";
 init_neo4j_store();
 init_loop_registry();
 var app66 = new Hono();
-var TAG46 = "[activity]";
+var TAG48 = "[activity]";
 function resolveHouseAccountId2(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
   if (houses.length === 1) return { accountId: houses[0].accountId, reason: "house" };
@@ -28714,19 +29030,19 @@ app66.get("/", requireAdminSession, async (c) => {
   const house = resolveHouseAccountId2(valid);
   const isHouse = caller2 !== null && house.accountId !== null && caller2 === house.accountId;
   console.log(
-    `${TAG46} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
+    `${TAG48} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
   );
   if (!isHouse) {
     const reason = house.accountId === null ? house.reason : "not-house";
     console.error(
-      `${TAG46} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
+      `${TAG48} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
     );
     return c.json({ error: "house-only" }, 403);
   }
-  console.log(`${TAG46} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
+  console.log(`${TAG48} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
   const onDisk = countAccountDirsOnDisk();
   console.log(
-    `${TAG46} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
+    `${TAG48} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
   );
   const start = Date.now();
   let res;
@@ -28742,17 +29058,17 @@ app66.get("/", requireAdminSession, async (c) => {
     });
   } catch (err) {
     console.error(
-      `${TAG46} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG48} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
     );
     return c.json({ error: "manager-unreachable" }, 502);
   }
   if (res.status !== 200) {
-    console.error(`${TAG46} op=manager-fail req=${req} reason=status status=${res.status}`);
+    console.error(`${TAG48} op=manager-fail req=${req} reason=status status=${res.status}`);
     return c.json({ error: `manager-status-${res.status}` }, 502);
   }
   const body = await res.json().catch(() => null);
   if (!body || !Array.isArray(body.rows)) {
-    console.error(`${TAG46} op=manager-fail req=${req} reason=bad-json`);
+    console.error(`${TAG48} op=manager-fail req=${req} reason=bad-json`);
     return c.json({ error: "manager-bad-json" }, 502);
   }
   const rows = body.rows;
@@ -28763,10 +29079,10 @@ app66.get("/", requireAdminSession, async (c) => {
   const ageNull = rows.filter((r) => r.ageMs === null).length;
   const sidecarNull = rows.filter((r) => r.sidecarMissing).length;
   console.log(
-    `${TAG46} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
+    `${TAG48} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
   );
   console.log(
-    `${TAG46} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
+    `${TAG48} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
   );
   const names = {};
   await Promise.all(
@@ -28785,7 +29101,7 @@ app66.get("/", requireAdminSession, async (c) => {
     return acc;
   }, {});
   console.log(
-    `${TAG46} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
+    `${TAG48} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
   );
   return c.json({
     rows,
@@ -28879,7 +29195,7 @@ init_dist();
 
 // server/routes/access/verify-token.ts
 init_dist();
-var TAG47 = "[access-verify]";
+var TAG49 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
 var app68 = new Hono();
@@ -28898,39 +29214,39 @@ app68.post("/", async (c) => {
   }
   const rateMsg = checkAccessRateLimit(ip, agentSlug);
   if (rateMsg) {
-    console.error(`${TAG47} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
+    console.error(`${TAG49} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
     return c.json({ error: rateMsg }, 429);
   }
   const grant = await findGrantByMagicToken(token);
   if (!grant) {
     recordAccessFailedAttempt(ip, agentSlug);
-    console.error(`${TAG47} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
+    console.error(`${TAG49} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.agentSlug !== agentSlug) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
+      `${TAG49} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
     );
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.status === "expired" || grant.status === "revoked") {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
+      `${TAG49} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (grant.expiresAt !== null && grant.expiresAt < Date.now()) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
+      `${TAG49} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (!grant.sliceToken) {
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
+      `${TAG49} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
     );
     return c.json({ error: "grant-misconfigured" }, 500);
   }
@@ -28946,12 +29262,12 @@ app68.post("/", async (c) => {
     await consumeMagicTokenAndActivate(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG49} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "verification-failed" }, 500);
   }
   clearAccessRateLimit(ip, agentSlug);
-  console.log(`${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
+  console.log(`${TAG49} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
   console.log(
     `${MINT_TAG} grantId=${grant.grantId} sliceToken=${grant.sliceToken.slice(0, 8)} agentSlug=${agentSlug} personId=${grant.personId ?? "none"}`
   );
@@ -29030,7 +29346,7 @@ async function sendMagicLinkEmail(payload) {
 }
 
 // server/routes/access/request-magic-link.ts
-var TAG48 = "[access-request-link]";
+var TAG50 = "[access-request-link]";
 var app69 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
 app69.post("/", async (c) => {
@@ -29047,18 +29363,18 @@ app69.post("/", async (c) => {
   }
   const rateMsg = checkRequestLinkRateLimit(contactValue);
   if (rateMsg) {
-    console.error(`${TAG48} contactValue=${maskContact(contactValue)} result=rate-limited`);
+    console.error(`${TAG50} contactValue=${maskContact(contactValue)} result=rate-limited`);
     return c.json({ error: rateMsg }, 429);
   }
   recordRequestLinkAttempt(contactValue);
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG48} contactValue=${maskContact(contactValue)} result=no-account-id`);
+    console.error(`${TAG50} contactValue=${maskContact(contactValue)} result=no-account-id`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   const grant = await findActiveGrantByContact(contactValue, agentSlug, accountId);
   if (!grant) {
-    console.log(`${TAG48} contactValue=${maskContact(contactValue)} result=notfound`);
+    console.log(`${TAG50} contactValue=${maskContact(contactValue)} result=notfound`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   let token;
@@ -29066,7 +29382,7 @@ app69.post("/", async (c) => {
     token = await generateNewMagicToken(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG48} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG50} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
@@ -29098,12 +29414,12 @@ app69.post("/", async (c) => {
   });
   if (!sendResult.ok) {
     console.error(
-      `${TAG48} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
+      `${TAG50} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   console.log(
-    `${TAG48} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
+    `${TAG50} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
@@ -29344,7 +29660,7 @@ init_dist();
 
 // app/lib/brand-config.ts
 import { existsSync as existsSync45, readFileSync as readFileSync46 } from "fs";
-import { join as join51 } from "path";
+import { join as join52 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -29352,7 +29668,7 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join51(platformRoot5, "config", "brand.json");
+  const brandPath = join52(platformRoot5, "config", "brand.json");
   if (!existsSync45(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync46(brandPath, "utf-8"));
@@ -30133,12 +30449,12 @@ var calendar_public_default = app76;
 init_dist();
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile11, realpath } from "fs/promises";
-import { join as join52, resolve as resolve42, sep as sep11 } from "path";
+import { join as join53, resolve as resolve42, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
 init_data_path();
 init_attachments();
 var app77 = new Hono();
-var TAG49 = "[portal-fetch]";
+var TAG51 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
   if (!Number.isFinite(expiresAtMs) || expiresAtMs <= nowMs) return false;
@@ -30193,14 +30509,14 @@ async function readAccountSecret(accountId) {
   try {
     text = await readFile11(path, "utf8");
   } catch {
-    console.error(`${TAG49} op=no-secret account="${accountId}" path="${path}"`);
+    console.error(`${TAG51} op=no-secret account="${accountId}" path="${path}"`);
     return "";
   }
   for (const line of text.split("\n")) {
     const m = line.match(/^PORTAL_FETCH_SECRET=(.*)$/);
     if (m) return m[1].trim();
   }
-  console.error(`${TAG49} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
+  console.error(`${TAG51} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
   return "";
 }
 function isValidAccountId2(value) {
@@ -30208,7 +30524,7 @@ function isValidAccountId2(value) {
 }
 async function readExposeFolders2(accountDir) {
   try {
-    const cfg = JSON.parse(await readFile11(join52(accountDir, "data-portal.json"), "utf8"));
+    const cfg = JSON.parse(await readFile11(join53(accountDir, "data-portal.json"), "utf8"));
     return Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
   } catch {
     return [];
@@ -30217,7 +30533,7 @@ async function readExposeFolders2(accountDir) {
 async function resolveFetchTarget(accountDir, relPath, ownerId) {
   let schemaText = null;
   try {
-    schemaText = await readFile11(join52(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile11(join53(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
@@ -30260,16 +30576,16 @@ async function handle(c, headOnly) {
   const sig = c.req.query("sig") ?? "";
   const owner = c.req.query("owner") ?? "";
   console.log(
-    `${TAG49} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
+    `${TAG51} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
   );
   if (!isValidAccountId2(accountId)) {
-    console.error(`${TAG49} op=denied account=${q(accountId)} reason=account-id`);
+    console.error(`${TAG51} op=denied account=${q(accountId)} reason=account-id`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const secret = await readAccountSecret(accountId);
   const verified = owner ? await verifyOwnUploadSignature(secret, accountId, owner, relPath, exp, sig, Date.now()) : await verifySignature(secret, accountId, relPath, exp, sig, Date.now());
   if (!verified) {
-    console.error(`${TAG49} op=denied account=${q(accountId)} reason=secret`);
+    console.error(`${TAG51} op=denied account=${q(accountId)} reason=secret`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const target = await resolveFetchTarget(
@@ -30279,14 +30595,14 @@ async function handle(c, headOnly) {
   );
   if (!target.ok) {
     const op = target.reason === "enoent" ? "miss" : "denied";
-    console.error(`${TAG49} op=${op} account=${accountId} reason=${target.reason}`);
+    console.error(`${TAG51} op=${op} account=${accountId} reason=${target.reason}`);
     return c.json({ ok: false, error: "not found" }, 404);
   }
   if (headOnly) {
-    console.log(`${TAG49} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
+    console.log(`${TAG51} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
     return c.body(null, 200);
   }
-  console.log(`${TAG49} op=served account=${accountId} bytes=${target.sizeBytes}`);
+  console.log(`${TAG51} op=served account=${accountId} bytes=${target.sizeBytes}`);
   return new Response(Readable3.toWeb(createReadStream3(target.absolute)), {
     status: 200,
     headers: {
@@ -30309,7 +30625,7 @@ init_remote_auth();
 
 // app/lib/timeentry-census.ts
 init_loop_registry();
-var TAG50 = "[timeentry-census]";
+var TAG52 = "[timeentry-census]";
 function reconcileTimeEntries(rows, now, horizonMs) {
   const openEntries = rows.openEntries.length;
   let oldestOpenAgeMs = 0;
@@ -30349,12 +30665,12 @@ async function runTimeEntryCensusOnce(session, now, horizonMs) {
       sumAdjustments: toNum(r.get("sumAdjustments"))
     }));
     const finding = reconcileTimeEntries({ openEntries, taskSums }, now, horizonMs);
-    const line = `${TAG50} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
+    const line = `${TAG52} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
     if (finding.alarm) console.error(`${line} alarm=true`);
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG50} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG52} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -30368,13 +30684,13 @@ function startTimeEntryCensus(openSession, opts = {}) {
     try {
       session = openSession();
     } catch (err) {
-      console.error(`${TAG50} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG52} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
       return;
     }
     try {
       await runTimeEntryCensusOnce(session, Date.now(), horizonMs);
     } catch (err) {
-      console.error(`${TAG50} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG52} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
     } finally {
       try {
         await session.close();
@@ -30396,7 +30712,7 @@ init_neo4j_store();
 // app/lib/ledger-census.ts
 init_loop_registry();
 import { readdirSync as readdirSync29, readFileSync as readFileSync47, statSync as statSync26 } from "fs";
-import { join as join53 } from "path";
+import { join as join54 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -30439,7 +30755,7 @@ function formatCensusLine(f) {
 }
 
 // app/lib/ledger-census.ts
-var TAG51 = "[ledger-census]";
+var TAG53 = "[ledger-census]";
 var DAY_MS = 864e5;
 function countWriteRejects24h(logDir, now) {
   let entries2;
@@ -30450,7 +30766,7 @@ function countWriteRejects24h(logDir, now) {
   }
   let total = 0;
   for (const name of entries2) {
-    const path = join53(logDir, name);
+    const path = join54(logDir, name);
     try {
       if (now - statSync26(path).mtimeMs > DAY_MS) continue;
       for (const line of readFileSync47(path, "utf8").split("\n")) {
@@ -30515,7 +30831,7 @@ async function runLedgerCensusOnce(session, now) {
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG51} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG53} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -30528,7 +30844,7 @@ function startLedgerCensus(openSession, opts = {}) {
       session = openSession();
     } catch (err) {
       console.error(
-        `${TAG51} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG53} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
       return;
     }
@@ -30536,7 +30852,7 @@ function startLedgerCensus(openSession, opts = {}) {
       await runLedgerCensusOnce(session, Date.now());
     } catch (err) {
       console.error(
-        `${TAG51} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG53} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
     } finally {
       try {
@@ -30559,7 +30875,7 @@ init_neo4j_store();
 
 // app/lib/conversation-audit.ts
 init_neo4j_store();
-var TAG52 = "[conversation-audit]";
+var TAG54 = "[conversation-audit]";
 async function runConversationAudit() {
   const session = getSession();
   try {
@@ -30596,12 +30912,12 @@ async function runConversationAudit() {
       multiAnchored: Number(multiRec?.get("multiAnchored") ?? 0)
     };
     console.error(
-      `${TAG52} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
+      `${TAG54} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
     );
     return result;
   } catch (err) {
     const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
-    console.error(`${TAG52} op=failed reason=${reason}`);
+    console.error(`${TAG54} op=failed reason=${reason}`);
     return null;
   } finally {
     await session.close();
@@ -30736,8 +31052,8 @@ init_loop_registry();
 init_data_path();
 var import_dist9 = __toESM(require_dist(), 1);
 import { existsSync as existsSync47, statSync as statSync27, readdirSync as readdirSync30 } from "fs";
-import { join as join54 } from "path";
-var TAG53 = "[shared-census]";
+import { join as join55 } from "path";
+var TAG55 = "[shared-census]";
 var WIRED_SURFACES = 3;
 function countFiles(dir) {
   let n = 0;
@@ -30748,7 +31064,7 @@ function countFiles(dir) {
     return 0;
   }
   for (const e of entries2) {
-    if (e.isDirectory()) n += countFiles(join54(dir, e.name));
+    if (e.isDirectory()) n += countFiles(join55(dir, e.name));
     else if (e.isFile()) n++;
   }
   return n;
@@ -30765,8 +31081,8 @@ function runSharedFolderCensus(dataRoot = DATA_ROOT) {
     }
   }
   const files = isDir ? countFiles(root) : 0;
-  console.error(`${TAG53} op=root exists=${exists} isDir=${isDir} files=${files}`);
-  console.error(`${TAG53} op=wiring surfaces=${WIRED_SURFACES}/3`);
+  console.error(`${TAG55} op=root exists=${exists} isDir=${isDir} files=${files}`);
+  console.error(`${TAG55} op=wiring surfaces=${WIRED_SURFACES}/3`);
   return `shared root ${exists ? "present" : "ABSENT"}, ${files} file(s)`;
 }
 function startSharedFolderCensus() {
@@ -30886,7 +31202,7 @@ async function startFileWatcher(opts = {}) {
 init_data_path();
 init_neo4j_store();
 init_account();
-import { mkdir as mkdir4, readdir as readdir6, rename as rename4, rm as rm3 } from "fs/promises";
+import { mkdir as mkdir5, readdir as readdir6, rename as rename4, rm as rm3 } from "fs/promises";
 import { dirname as dirname17, relative as relative8, resolve as resolve44 } from "path";
 var ACCOUNT_UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function walkFiles(dir) {
@@ -30919,7 +31235,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
   for (const oldAbs of files) {
     const suffix = relative8(srcDir, oldAbs);
     const newAbs = resolve44(destDir, suffix);
-    await mkdir4(dirname17(newAbs), { recursive: true });
+    await mkdir5(dirname17(newAbs), { recursive: true });
     await rename4(oldAbs, newAbs);
     moved++;
     const oldRel = relative8(dataRoot, oldAbs);
@@ -31013,9 +31329,9 @@ init_paths();
 init_pin_validator();
 init_account();
 init_neo4j_store();
-import { readdir as readdir7, readFile as readFile12, rename as rename5, writeFile as writeFile4, unlink as unlink4 } from "fs/promises";
+import { readdir as readdir7, readFile as readFile12, rename as rename5, writeFile as writeFile5, unlink as unlink4 } from "fs/promises";
 import { existsSync as existsSync48 } from "fs";
-import { join as join55 } from "path";
+import { join as join56 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -31040,7 +31356,7 @@ async function readRaw3(path) {
 async function writeRaw(path, obj) {
   const tmp = `${path}.tmp.${process.pid}.${Date.now()}`;
   try {
-    await writeFile4(tmp, JSON.stringify(obj, null, 2), "utf8");
+    await writeFile5(tmp, JSON.stringify(obj, null, 2), "utf8");
     await rename5(tmp, path);
   } catch (err) {
     try {
@@ -31060,7 +31376,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join55(projectsRoot, slug.name);
+    const slugDir = join56(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir7(slugDir, { withFileTypes: true });
@@ -31069,9 +31385,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join55(slugDir, entry.name));
+        out.push(join56(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join55(slugDir, entry.name);
+        const subDir = join56(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -31079,7 +31395,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join55(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join56(subDir, s.name));
         }
       }
     }
@@ -31091,7 +31407,7 @@ function shortId(path) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join55(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join56(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -31167,9 +31483,9 @@ async function migrateAdminWebchatSidecars(opts = {}) {
 
 // app/lib/migrate-sidecar-account-ids.ts
 init_account();
-import { readdir as readdir8, readFile as readFile13, rename as rename6, writeFile as writeFile5, unlink as unlink5 } from "fs/promises";
+import { readdir as readdir8, readFile as readFile13, rename as rename6, writeFile as writeFile6, unlink as unlink5 } from "fs/promises";
 import { existsSync as existsSync49 } from "fs";
-import { join as join56 } from "path";
+import { join as join57 } from "path";
 var SESSION_META_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
 function projectSlugForCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -31191,7 +31507,7 @@ async function readRaw4(path) {
 async function writeRaw2(path, obj) {
   const tmp = `${path}.tmp.${process.pid}.${Date.now()}`;
   try {
-    await writeFile5(tmp, JSON.stringify(obj, null, 2), "utf8");
+    await writeFile6(tmp, JSON.stringify(obj, null, 2), "utf8");
     await rename6(tmp, path);
   } catch (err) {
     try {
@@ -31215,7 +31531,7 @@ async function collectSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join56(projectsRoot, slug.name);
+    const slugDir = join57(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir8(slugDir, { withFileTypes: true });
@@ -31224,9 +31540,9 @@ async function collectSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE2.test(entry.name)) {
-        out.push({ path: join56(slugDir, entry.name), slug: slug.name });
+        out.push({ path: join57(slugDir, entry.name), slug: slug.name });
       } else if (entry.isDirectory() && (entry.name === "subagents" || entry.name === "archive")) {
-        const subDir = join56(slugDir, entry.name);
+        const subDir = join57(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -31235,7 +31551,7 @@ async function collectSidecars(projectsRoot) {
         }
         for (const s of subs) {
           if (s.isFile() && SESSION_META_RE2.test(s.name)) {
-            out.push({ path: join56(subDir, s.name), slug: slug.name });
+            out.push({ path: join57(subDir, s.name), slug: slug.name });
           }
         }
       }
@@ -31244,7 +31560,7 @@ async function collectSidecars(projectsRoot) {
   return out;
 }
 async function migrateSidecarAccountIds(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join56(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join57(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const accounts = opts.accounts ?? listValidAccounts();
   const result = {
     scanned: 0,
@@ -31459,15 +31775,15 @@ var InboundHub = class {
 
 // app/lib/whatsapp/inbound/public-inbound-census.ts
 var routed = 0;
-var answered = 0;
+var answered2 = 0;
 function noteRouted() {
   routed += 1;
 }
-function noteAnswered() {
-  answered += 1;
+function noteAnswered2() {
+  answered2 += 1;
 }
 function readPublicInboundCensus() {
-  return { routed, answered, answerGap: Math.max(0, routed - answered) };
+  return { routed, answered: answered2, answerGap: Math.max(0, routed - answered2) };
 }
 function runPublicNotifyReconcile() {
   const c = readPublicInboundCensus();
@@ -32013,7 +32329,7 @@ var WaGateway = class {
    *  inbound; it is dropped and counted as expired, not reported as a race. */
   noteReplyDispatch(senderId, atMs) {
     const key2 = normalizeTarget(senderId) ?? senderId;
-    if (this.awaitingPublicAnswer.delete(key2)) noteAnswered();
+    if (this.awaitingPublicAnswer.delete(key2)) noteAnswered2();
     const inFlight2 = this.pendingMediaStanza.get(key2);
     if (inFlight2 === void 0) return;
     this.expireStaleStanzas(key2, inFlight2, atMs);
@@ -32770,7 +33086,7 @@ function createWebchatChannelRoutes(deps) {
 
 // app/lib/webchat/gateway/resolve-turn-answer.ts
 import { existsSync as existsSync50, openSync as openSync9, readSync as readSync8, closeSync as closeSync9, readdirSync as readdirSync31 } from "fs";
-import { join as join57 } from "path";
+import { join as join58 } from "path";
 function resolveTurnAnswer(p) {
   if (!SESSION_ID_RE2.test(p.sessionId)) return "";
   const path = findJsonl(p.projectsRoot, p.sessionId);
@@ -32806,7 +33122,7 @@ function findJsonl(projectsRoot, sessionId) {
     return null;
   }
   for (const slug of slugs) {
-    const live = join57(projectsRoot, slug, `${sessionId}.jsonl`);
+    const live = join58(projectsRoot, slug, `${sessionId}.jsonl`);
     if (existsSync50(live)) return live;
   }
   return null;
@@ -33604,14 +33920,14 @@ function makeFileDelivery(opts) {
 }
 
 // app/lib/webchat/file-delivery.ts
-var TAG54 = "[webchat-adaptor]";
+var TAG56 = "[webchat-adaptor]";
 function platformRoot2() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeWebchatSendFile(entry) {
   return async (filePath) => {
     if (!entry.accountId) {
-      console.error(`${TAG54} file-delivery reject reason=no-account sender=${entry.senderId}`);
+      console.error(`${TAG56} file-delivery reject reason=no-account sender=${entry.senderId}`);
       return { ok: false, error: "no-account" };
     }
     const accountDir = resolve45(platformRoot2(), "..", "data/accounts", entry.accountId);
@@ -33619,14 +33935,14 @@ function makeWebchatSendFile(entry) {
       const resolved = realpathSync9(filePath);
       const accountResolved = realpathSync9(accountDir);
       if (!resolved.startsWith(accountResolved + "/")) {
-        console.error(`${TAG54} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
+        console.error(`${TAG56} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
         return { ok: false, error: "outside-account" };
       }
       return { ok: true };
     } catch (err) {
       const code = err.code;
       console.error(
-        `${TAG54} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
+        `${TAG56} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
       );
       return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
     }
@@ -33635,7 +33951,7 @@ function makeWebchatSendFile(entry) {
 function makeWebchatFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG54,
+    tag: TAG56,
     channel: "webchat",
     sendFile: makeWebchatSendFile(entry),
     deferUntilVerdict: true
@@ -33699,7 +34015,7 @@ function buildPublicWebchatSpawnRequest(input) {
 }
 
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG55 = "[whatsapp-adaptor]";
+var TAG57 = "[whatsapp-adaptor]";
 var SEND_USER_FILE2 = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot3() {
@@ -33717,7 +34033,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG55} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
+      `${TAG57} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
@@ -33725,7 +34041,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
 function makeWhatsAppFileDelivery(entry, maxyAccountId) {
   const shared = makeFileDelivery({
     entry,
-    tag: TAG55,
+    tag: TAG57,
     channel: "whatsapp",
     sendFile: makeWhatsAppSendFile(entry, maxyAccountId)
   });
@@ -33760,7 +34076,7 @@ function makeWhatsAppFileDelivery(entry, maxyAccountId) {
         if (!delivered) {
           const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
           console.error(
-            `${TAG55} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG57} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -34065,52 +34381,6 @@ function createTelegramChannelRoutes(deps) {
 init_admin_session_id();
 init_channel_key();
 
-// app/lib/telegram/gateway/telegram-inbound-census.ts
-var ANSWER_THRESHOLD_MS = 3e4;
-var GAP_NAME_LIMIT2 = 10;
-var received = 0;
-var answered2 = 0;
-var outstanding2 = /* @__PURE__ */ new Map();
-function noteReceived(key2, botId, messageId, now) {
-  received += 1;
-  const list = outstanding2.get(key2);
-  if (list) list.push({ messageId, botId, receivedAt: now });
-  else outstanding2.set(key2, [{ messageId, botId, receivedAt: now }]);
-}
-function noteAnswered2(key2) {
-  const list = outstanding2.get(key2);
-  if (!list || list.length === 0) return;
-  list.shift();
-  if (list.length === 0) outstanding2.delete(key2);
-  answered2 += 1;
-}
-function readTelegramInboundCensus(now) {
-  const gaps = [];
-  for (const [key2, list] of outstanding2) {
-    for (const o of list) {
-      const ageMs2 = now - o.receivedAt;
-      if (ageMs2 > ANSWER_THRESHOLD_MS) gaps.push({ messageId: o.messageId, botId: o.botId, key: key2, ageMs: ageMs2 });
-    }
-  }
-  gaps.sort((a, b) => b.ageMs - a.ageMs);
-  return { received, answered: answered2, gaps };
-}
-function buildTelegramNotifyReconcileLines(input) {
-  const named = input.gaps.slice(0, GAP_NAME_LIMIT2);
-  const lines = [
-    `[telegram-native] op=telegram-notify-reconcile received=${input.received} answered=${input.answered} answerGap=${input.gaps.length} named=${named.length}`
-  ];
-  for (const g of named) {
-    lines.push(
-      `[telegram-native] op=telegram-answer-gap messageId=${g.messageId} botId=${g.botId} key=${g.key} ageMs=${g.ageMs}`
-    );
-  }
-  return lines;
-}
-function runTelegramNotifyReconcile(now) {
-  for (const line of buildTelegramNotifyReconcileLines(readTelegramInboundCensus(now))) console.error(line);
-}
-
 // app/lib/telegram/gateway/telegram-spawn-census.ts
 var byBot = /* @__PURE__ */ new Map();
 function bucket(botId) {
@@ -34282,7 +34552,7 @@ var TelegramGateway = class {
       );
     }
     this.hub.deliver(
-      { key: key2, text: input.text, messageId: `tg-${++this.seq}`, source, standingRules, scheduleProvenance: input.scheduleProvenance },
+      { key: key2, text: input.text, media: input.media, messageId: `tg-${++this.seq}`, source, standingRules, scheduleProvenance: input.scheduleProvenance },
       Date.now()
     );
     const resolvedSessionId = this.sessionIdFor(input);
@@ -34326,7 +34596,7 @@ var TelegramGateway = class {
     const reply = this.replies.get(key2);
     if (!reply) throw new Error(`telegram-gateway: no reply route for key ${key2}`);
     await reply(text);
-    noteAnswered2(key2);
+    noteAnswered(key2);
   }
 };
 
@@ -34362,7 +34632,7 @@ function buildTelegramSpawnRequest(input) {
 }
 
 // server/telegram-ensure-session.ts
-var TAG56 = "[telegram-inbound]";
+var TAG58 = "[telegram-inbound]";
 function buildTelegramEnsureSession(deps) {
   return async (input) => {
     const req = buildTelegramSpawnRequest({
@@ -34396,10 +34666,10 @@ function buildTelegramEnsureSession(deps) {
         return;
       }
       console.error(
-        `${TAG56} op=telegram-spawn-door botId=${input.botId} role=public door=rc agent=${input.agentSlug}`
+        `${TAG58} op=telegram-spawn-door botId=${input.botId} role=public door=rc agent=${input.agentSlug}`
       );
       console.error(
-        `${TAG56} op=spawn botId=${input.botId} sessionId=${result2.sessionId} targetAccountId=${input.accountId} role=public`
+        `${TAG58} op=spawn botId=${input.botId} sessionId=${result2.sessionId} targetAccountId=${input.accountId} role=public`
       );
       noteSpawnOk2(input.botId);
       return;
@@ -34413,7 +34683,7 @@ function buildTelegramEnsureSession(deps) {
       return;
     }
     console.error(
-      `${TAG56} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=admin`
+      `${TAG58} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=admin`
     );
     noteSpawnOk2(input.botId);
     deps.followers.get(req.channelKey)?.abort();
@@ -34439,7 +34709,7 @@ init_attachments();
 import { realpathSync as realpathSync10 } from "fs";
 import { readFile as readFile14, stat as stat10 } from "fs/promises";
 import { resolve as resolve46, basename as basename16 } from "path";
-var TAG57 = "[telegram:outbound]";
+var TAG59 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
   const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot5 } = input;
@@ -34456,10 +34726,10 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG57} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG59} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 500, error: `Account directory not resolvable for ${maxyAccountId}` };
     }
-    console.error(`${TAG57} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG59} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   let resolvedPath;
@@ -34468,14 +34738,14 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG57} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG59} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG57} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG59} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   if (!resolvedPath.startsWith(accountResolved + "/")) {
-    console.error(`${TAG57} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+    console.error(`${TAG59} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
     return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
   }
   const fileStat = await stat10(resolvedPath);
@@ -34508,24 +34778,24 @@ async function sendTelegramDocument(input) {
     error = e instanceof Error ? e.message : String(e);
   }
   console.error(
-    `${TAG57} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok2}` + (messageId !== void 0 ? ` id=${messageId}` : "")
+    `${TAG59} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok2}` + (messageId !== void 0 ? ` id=${messageId}` : "")
   );
   return ok2 ? { ok: true, messageId } : { ok: false, status: 500, error };
 }
 
 // app/lib/telegram/outbound/file-delivery.ts
-var TAG58 = "[telegram:outbound]";
+var TAG60 = "[telegram:outbound]";
 function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeTelegramSendFile(entry, botToken) {
   return async (filePath, caption) => {
     if (!botToken) {
-      console.error(`${TAG58} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG60} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-bot-token" };
     }
     if (entry.replyTarget == null) {
-      console.error(`${TAG58} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG60} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
@@ -34542,7 +34812,7 @@ function makeTelegramSendFile(entry, botToken) {
 function makeTelegramFileDelivery(entry, botToken) {
   return makeFileDelivery({
     entry,
-    tag: TAG58,
+    tag: TAG60,
     channel: "telegram",
     sendFile: makeTelegramSendFile(entry, botToken)
   });
@@ -34631,7 +34901,7 @@ init_webchat();
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 init_src3();
 import { randomUUID as randomUUID14 } from "crypto";
-var TAG59 = "[public-session-review]";
+var TAG61 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -34658,7 +34928,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG59} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG61} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -34682,7 +34952,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG59} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG61} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -34690,7 +34960,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG59} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG61} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -34719,7 +34989,7 @@ function composeInitialMessage(input) {
 }
 async function dispatchReviewer(input, initialMessage) {
   const sessionId = randomUUID14();
-  console.log(`${TAG59} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  console.log(`${TAG61} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -34743,21 +35013,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG61} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG61} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG61} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -34771,19 +35041,19 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG61} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG61} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG61} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
 
@@ -34935,7 +35205,7 @@ init_account();
 
 // server/telegram-audit.ts
 import { statSync as statSync28 } from "fs";
-import { join as join58 } from "path";
+import { join as join59 } from "path";
 init_channel_key();
 init_sidebar_sessions();
 function buildTelegramAuditLines(input) {
@@ -35001,7 +35271,7 @@ function countTelegramSessionsForAccount(accountId) {
 function* walkTelegramSidecars() {
   const cfg = claudeConfigDir();
   if (!cfg) return;
-  const projectsRoot = join58(cfg, "projects");
+  const projectsRoot = join59(cfg, "projects");
   for (const { path } of enumerateSessionSidecars(projectsRoot)) {
     const meta = readSidecarMeta(path);
     if (meta.channel !== "telegram" || !meta.accountId) continue;
@@ -35028,11 +35298,11 @@ function* walkTelegramSidecars() {
 
 // server/telegram-migrate.ts
 import { readFileSync as readFileSync48, writeFileSync as writeFileSync19, existsSync as existsSync51, renameSync as renameSync11, mkdirSync as mkdirSync11 } from "fs";
-import { dirname as dirname18, join as join59 } from "path";
+import { dirname as dirname18, join as join60 } from "path";
 function migrateTelegramTwoSlot(input) {
   const out = [];
   for (const account of input.accounts) {
-    const configPath3 = join59(account.accountDir, "account.json");
+    const configPath3 = join60(account.accountDir, "account.json");
     let config;
     try {
       config = JSON.parse(readFileSync48(configPath3, "utf-8"));
@@ -35429,7 +35699,7 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join60(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join61(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync54(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -35468,7 +35738,7 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join60(homedir5(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join61(homedir5(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync54(ALIAS_DOMAINS_PATH)) return null;
@@ -35573,7 +35843,7 @@ var waGateway = new WaGateway({
     deps: adminFanDeps("whatsapp", accountId)
   }),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve49(process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve49(process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -35588,7 +35858,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, ".."))
+      platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -35755,7 +36025,7 @@ function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join60(configDir, "projects");
+    const projectsRoot = join61(configDir, "projects");
     const records2 = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -35807,7 +36077,7 @@ var webchatGateway = new WebchatGateway({
   // rather than hanging the POST.
   publicProjectsRoot: () => {
     const cfg = claudeConfigDir();
-    return cfg ? join60(cfg, "projects") : "";
+    return cfg ? join61(cfg, "projects") : "";
   },
   gatewayUrl: webchatGatewayUrl(),
   serverPath: webchatServerPath(),
@@ -36481,7 +36751,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join60(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join61(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
     if (!existsSync54(versionFile)) return "unknown";
     const content = readFileSync51(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -36511,12 +36781,12 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join60(homedir5(), BRAND.configDir);
+  const configDir = join61(homedir5(), BRAND.configDir);
   try {
     const verdict = resolvePublicAddressFromDisk(agentSlug);
     const accountId = verdict.kind === "served" ? verdict.owner.accountId : getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join60(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join61(configDir, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync54(cachePath)) return null;
     return JSON.parse(readFileSync51(cachePath, "utf-8"));
   } catch {
@@ -36766,7 +37036,7 @@ var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app78.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const reconcileScript = resolve49(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
     if (!existsSync54(reconcileScript)) return;
@@ -36789,7 +37059,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join60(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join61(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -36807,7 +37077,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const dreamSweepScript = resolve49(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -36831,7 +37101,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const outlookScript = resolve49(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
@@ -36857,7 +37127,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const strandedAccountsDir = resolve49(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
@@ -36887,7 +37157,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const googleAccountsDir = resolve49(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -36931,7 +37201,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -37133,7 +37403,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const publishScript = resolve49(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -37210,7 +37480,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..");
   const auditScript = resolve49(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
@@ -37422,8 +37692,8 @@ var runIngestAuditTick = () => {
       },
       agentExists: (accountId, slug) => {
         if (!house) return false;
-        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join60(ACCOUNTS_DIR, accountId);
-        return existsSync54(join60(dir, "agents", slug, "config.json"));
+        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join61(ACCOUNTS_DIR, accountId);
+        return existsSync54(join61(dir, "agents", slug, "config.json"));
       }
     });
   } catch (err) {
@@ -37471,7 +37741,7 @@ registerLoop({
       runPublicAddressCollisionAudit({
         houseAccountId: () => resolveAccount()?.accountId ?? null,
         activeSlugs: () => listValidAccounts().map((a) => {
-          const agentsRoot = join60(a.accountDir, "agents");
+          const agentsRoot = join61(a.accountDir, "agents");
           if (!existsSync54(agentsRoot)) return { accountId: a.accountId, slugs: [] };
           const slugs = readdirSync32(agentsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).filter((slug) => isActiveAgentSlug(a.accountDir, slug));
           return { accountId: a.accountId, slugs };
@@ -37655,7 +37925,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..")),
+  platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join61(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not